p2: digest with in-sift FIFO, SQLite caches, Honcho context, recover

Dixie is capped (max_inflight 2, queue_depth 8, queue_wait 20s) and
never queued on llama-server. Streaming chat, thinking off, 45s
fallback to clean. Digest and chunk-embedding caches are
content-addressed SQLite (Honcho context is not cached). Recover
uses the guarded Fetcher. guardian-star is refused in code.

vendor/modernc.org/libc/tls_linux_amd64.go

@@ -0,0 +1,33 @@
+// Copyright 2025 The Libc Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package libc // import "modernc.org/libc"
+
+//go:noescape
+func TLSAlloc(p0 *TLS, p1 int) uintptr
+
+//go:noescape
+func TLSFree(p0 *TLS, p1 int)
+
+//go:noescape
+func TLSAllocaEntry(p0 *TLS)
+
+//go:noescape
+func TLSAllocaExit(p0 *TLS)
+
+func tlsAlloc(tls *TLS, n int) uintptr {
+	return tls.Alloc(n)
+}
+
+func tlsFree(tls *TLS, n int) {
+	tls.Free(n)
+}
+
+func tlsAllocaEntry(tls *TLS) {
+	tls.AllocaEntry()
+}
+
+func tlsAllocaExit(tls *TLS) {
+	tls.AllocaExit()
+}