memory: move agent memory into repo (memory/), note in AGENTS.md

Persistent agent memories now live in memory/ in this repo; the Claude
auto-memory path is symlinked here so future memories land in the repo
and get committed like any other change.

AGENTS.md

@@ -85,6 +85,15 @@ cc-ci VM"). The orchestrator is the human's steering wheel; the loops are the en
 Never commit secret values. `.testenv`, `*.tfstate`, `*.key`/`*.pem`, and the loop runtime/clone
 dirs are gitignored. Reference secret *locations*, never their contents (`plan.md` §9).
 
+## Agent memory lives in `memory/` (in this repo)
+
+The orchestrator's persistent agent memory is the **`memory/`** directory of this repo — one file
+per fact with frontmatter, indexed by `memory/MEMORY.md`. The Claude auto-memory path
+(`~/.claude/projects/-srv-cc-ci-orch/memory`) is a **symlink** to it, so memories written the normal
+way land in the repo automatically. **Future memories must also go there**: after writing or
+updating a memory file (and its `MEMORY.md` index line), commit it here and push, like any other
+intentional repo change. Never put secret values in a memory file (see Hard rule).
+
 ## Commit discipline
 
 When the orchestrator, Builder, or assistant makes intentional repository changes here, commit them