fix: resolve moderate issues across config

- architect: restore effort: max to match orchestrate team roster
- orchestrate: remove researcher background annotation (blocks planning),
  remove overly broad auditor trigger clause, risk-tag table is authoritative
- qa-checklist: add auditor hard rules (security_findings, build/test status)
- settings.json: simplify .env deny to single **/.env* glob per tool
- rules/01-session: clarify persistent context includes .claude/memory/
- memory: rename todo_inter_agent_schema.md → inter_agent_schema.md

rules/01-session.md

@@ -1,8 +1,8 @@
 # Session Behavior
 
 - Treat each session as stateless — do not assume context from prior sessions
-- The CLAUDE.md hierarchy is the only source of persistent context
-- If something needs to carry forward across sessions, it belongs in a CLAUDE.md file, not in session memory
+- The CLAUDE.md hierarchy and `.claude/memory/` are the only sources of persistent context
+- If something needs to carry forward across sessions, persist it in the appropriate file — not in session memory
 
 # Project Memory