HTTP Layer Integration:
- Add access_guard to AppState with builtin_role_provider
- Add to_rbac_claims() to convert JwtClaims → RBAC Claims
- Add query_result_to_resource_meta() for result filtering
Query Handler (/memory/query):
- RBAC filter applied after M3.8 optimization
- Batch check_access for all results
- Log filtered count per request
Context Handler (/memory/context):
- Project-level access check before lookup
- Return 403 if user lacks project access
Code Cleanup:
- Move http_server from bin to lib module
- Use mem_cli::http_server in main.rs
All 660+ tests passing.