p2: digest with in-sift FIFO, SQLite caches, Honcho context, recover

Dixie is capped (max_inflight 2, queue_depth 8, queue_wait 20s) and
never queued on llama-server. Streaming chat, thinking off, 45s
fallback to clean. Digest and chunk-embedding caches are
content-addressed SQLite (Honcho context is not cached). Recover
uses the guarded Fetcher. guardian-star is refused in code.

vendor/modernc.org/sqlite/lib/sqlite_g_0000000000000150.go

@@ -0,0 +1,40 @@
+// Code generated by modernc.org/undup from the per-target sqlite_*.go files; DO NOT EDIT.
+
+//go:build (freebsd && arm) || (linux && 386) || (linux && arm)
+
+package sqlite3
+
+import (
+	"modernc.org/libc"
+)
+
+// C documentation
+//
+//	/*
+//	** Sleep for a little while.  Return the amount of time slept.
+//	** The argument is the number of microseconds we want to sleep.
+//	** The return value is the number of microseconds of sleep actually
+//	** requested from the underlying operating system, a number which
+//	** might be greater than or equal to the argument, but not less
+//	** than the argument.
+//	*/
+func _unixSleep(tls *libc.TLS, NotUsed uintptr, microseconds int32) (r int32) {
+	bp := tls.Alloc(16)
+	defer tls.Free(16)
+	var _ /* sp at bp+0 */ Ttimespec
+	(**(**Ttimespec)(__ccgo_up(bp))).Ftv_sec = int64(microseconds / int32(1000000))
+	(**(**Ttimespec)(__ccgo_up(bp))).Ftv_nsec = microseconds % int32(1000000) * int32(1000)
+	/* Almost all modern unix systems support nanosleep().  But if you are
+	 ** compiling for one of the rare exceptions, you can use
+	 ** -DHAVE_NANOSLEEP=0 (perhaps in conjunction with -DHAVE_USLEEP if
+	 ** usleep() is available) in order to bypass the use of nanosleep() */
+	libc.Xnanosleep(tls, bp, libc.UintptrFromInt32(0))
+	_ = NotUsed
+	return microseconds
+}
+
+/*
+** The following variable, if set to a non-zero value, is interpreted as
+** the number of seconds since 1970 and is used to set the result of
+** sqlite3OsCurrentTime() during testing.
+ */