feat: complete Phase 1-3 architecture optimization

Phase 1 - Security:
- Add AES-GCM encryption for localStorage fallback
- Enforce WSS protocol for non-localhost WebSocket connections
- Add URL sanitization to prevent XSS in markdown links

Phase 2 - Domain Reorganization:
- Create Intelligence Domain with Valtio store and caching
- Add unified intelligence-client for Rust backend integration
- Migrate from legacy agent-memory, heartbeat, reflection modules

Phase 3 - Core Optimization:
- Add virtual scrolling for ChatArea with react-window
- Implement LRU cache with TTL for intelligence operations
- Add message virtualization utilities

Additional:
- Add OpenFang compatibility test suite
- Update E2E test fixtures
- Add audit logging infrastructure
- Update project documentation and plans

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

desktop/src-tauri/src/memory/mod.rs

@@ -3,12 +3,14 @@
 //! This module provides functionality that the OpenViking CLI lacks:
 //! - Session extraction: LLM-powered memory extraction from conversations
 //! - Context building: L0/L1/L2 layered context loading
+//! - Encryption: AES-256-GCM encryption for sensitive memory content
 //!
 //! These components work alongside the OpenViking CLI sidecar.
 
 pub mod extractor;
 pub mod context_builder;
 pub mod persistent;
+pub mod crypto;
 
 // Re-export main types for convenience
 pub use extractor::{SessionExtractor, ExtractedMemory, ExtractionConfig};
@@ -17,3 +19,7 @@ pub use persistent::{
     PersistentMemory, PersistentMemoryStore, MemorySearchQuery, MemoryStats,
     generate_memory_id,
 };
+pub use crypto::{
+    CryptoError, KEY_SIZE, MEMORY_ENCRYPTION_KEY_NAME,
+    derive_key, generate_key, encrypt, decrypt,
+};