fix: P2-24 memory dedup + P2-25 audit logging + P3-02 whiteboard unification

P2-24: Add content_hash column to memories table with index.
Before INSERT, check for existing entry with same normalized content
hash within agent scope; merge importance and bump access_count.

P2-25: Add hand_executed/hand_approved/hand_denied/skill_executed
event types to security-audit.ts. Insert audit logging calls in
kernel-hands.ts triggerHand/approveHand and kernel-skills.ts
executeSkill execution paths.

P3-02: SceneRenderer now imports WhiteboardCanvas component instead
of inline SVG rendering, gaining chart/latex support. Deleted 27
lines of duplicated renderWhiteboardItem code.

Update DEFECT_LIST.md: P1-01 ✅ (Fantoccini confirmed), P3-02 ✅,
add P2-24/P2-25 entries. Active count: 48→50 fixed, 3→1 remaining.

desktop/src/lib/security-audit.ts

@@ -41,7 +41,11 @@ export type SecurityEventType =
   | 'session_started'
   | 'session_ended'
   | 'rate_limit_exceeded'
-  | 'suspicious_activity';
+  | 'suspicious_activity'
+  | 'hand_executed'
+  | 'hand_approved'
+  | 'hand_denied'
+  | 'skill_executed';
 
 export type SecurityEventSeverity = 'info' | 'warning' | 'error' | 'critical';
 
@@ -190,6 +194,10 @@ function getDefaultSeverity(type: SecurityEventType): SecurityEventSeverity {
     session_ended: 'info',
     rate_limit_exceeded: 'warning',
     suspicious_activity: 'critical',
+    hand_executed: 'info',
+    hand_approved: 'info',
+    hand_denied: 'warning',
+    skill_executed: 'info',
   };
 
   return severityMap[type] || 'info';