brokerd: memory calls to memoryd with the session's state; labels only stricter

Implemented-By: OpenCode session (model recorded in docs/implementer-log.md)

crates/brokerd/src/main.rs

@@ -8,6 +8,7 @@ use std::sync::Arc;
 use brokerd::audit::{AuditError, RECOVERED_NOTICE};
 use brokerd::config::Config;
 use brokerd::container::Podman;
+use brokerd::memory_port::{MEMORY_WAIT, MemoryPort, Routed};
 use brokerd::runner::{Refusing, Runtime};
 use brokerd::serve::{self, ServeError};
 
@@ -66,6 +67,12 @@ fn main() -> ExitCode {
         }
     }
 
+    // The memory tools go to `memoryd`, whatever runs the others (M5a spec, section 8).
+    let runtime: Box<dyn Runtime> = Box::new(Routed {
+        memory: MemoryPort::new(cfg.memory_socket(), MEMORY_WAIT),
+        other: runtime,
+    });
+
     let started = match serve::start(cfg, accept_break, runtime, log) {
         Ok(started) => started,
         Err(ServeError::Audit(e @ AuditError::NothingToAccept)) => {