Work playbooks inject on start; forget needs approval
What shipped.
- Work items can carry a playbook slug. When an agent starts that work, the named playbook (and the skills it cites) is prepended into the spawn prompt — no memory_recall hunt.
- Agent seats cannot memory_forget durable rows until an approval child is done. Same gate family as file_publish. Console humans still forget.
- /mcp Streamable HTTP is on the same streaming passthrough as /app/chat/completions, so long MCP streams no longer pin the single uvicorn worker.