fix: restore project artifacts and test outcomes when resuming tasks

[Sycun]

Problem

When a user resumes a project the next day, the agent receives a fact summary index and workspace path but can overlook existing scripts, linked vulnerabilities, and previously tested routes. It may rebuild a working script or repeat a test whose outcome was already established.

Changes

• Restore project artifact/test previews and linked vulnerability IDs, targets, and statuses alongside the fact index on each user task. Keep the supplement inside the existing refresh boundaries so context compaction and delegated task enrichment also carry it.
• Add a bounded workspace script inventory, prioritizing artifacts/. Include only file metadata, without reading or executing scripts or traversing symlinks; file existence is not treated as proof of success.
• Introduce artifact/* and test/* recording conventions using the existing note category, with templates for paths, invocation, dependencies, evidence, tested conditions, and retest triggers. Preserve discovery of existing exploit/* and poc/* records.
• Instruct agents to recover relevant evidence and reuse verified artifacts before new exploration. Skip evidenced negative routes under unchanged conditions; permit retesting when conditions change, evidence is insufficient, or the user requests it. Errors/timeouts must not become negative findings.
• Document limits and fallback retrieval: up to 6500 characters for the continuation supplement within the configured fact index cap, and 4000 for the workspace inventory, with independent artifact/test quotas and pagination guidance. No database migration is needed.

Retrieval, registration, and reuse remain model-driven rather than a hard tool-call gate. Deleted or never-saved historical scripts cannot be recovered automatically.

Validation

• Added regression tests covering database reopen, same-project cross-conversation reuse, project isolation, compaction refresh, empty fact indexes with existing vulnerabilities, independent result quotas, combined index caps/host delimiters, index-projection body recovery, inventory limits/escaping, symlinks, and artifact priority.
• Passed go test ./internal/project ./internal/projectprompt ./internal/handler ./internal/multiagent ./internal/app ./internal/database and go build ./... after merging current upstream main.
• Passed all 311 frontend regression tests.
• Passed git diff --check origin/main...HEAD; working tree clean before push.