feat(mcp): add privacy-safe recall receipts

[SiddheshCodes4554]

This PR adds an optional, privacy-safe receipt mechanism for MCP recall operations so users can debug cross-client memory behavior without exposing raw memory content, prompts, or repository text.

Why

In multi-client workflows (Cursor, Claude Code, VS Code, etc.), debugging failures like:

• “memory wasn’t recalled”
• “wrong project context was retrieved”
• “search worked but context wasn’t loaded”

currently requires sharing sensitive raw content.

What’s Included

• Added a new receipt helper module for:
  receipt shape/type
• SHA-256-based privacy hashing (with optional salt)
• similarity score bucketing
• standardized receipt log formatting
• Wired receipt generation into recall flow (both profile and non-profile paths)
• Added optional server-side receipt logging via env flags
• Documented receipt behavior and configuration in MCP README