Add memory-dream skill + additive cross-machine memory sync

memory-dream: read-only memory lint/consolidation analyzer (index, backlinks,
stale refs, dup clusters, profile drift); additive-only --apply-safe, all
merges/deletes are proposals. sync-memory.sh: additive repo<->harness-profile
union (no delete/overwrite, conflicts surfaced), wired to a SessionStart hook.
Migrates the useful profile-only memories into the synced repo store.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

.claude/memory/feedback_entra_app_owner.md

@@ -0,0 +1,20 @@
+---
+name: Add Mike as owner on all Entra apps
+description: Apps created via management SP have no user owner — must add Mike manually or publisher verification fails
+type: feedback
+originSessionId: 045c6ef2-5711-4aca-b86f-55506c9b6ada
+---
+After creating any Entra app registration via the ComputerGuru-Management service principal, always add Mike (f34ebe40-9565-4135-af4c-2e808df57a25) as an owner immediately.
+
+**Why:** Apps created via client credentials have no user owner. Microsoft requires a user owner to perform publisher verification (MPN badge). Without this step, the portal shows "A verified publisher cannot be added to this application."
+
+**How to apply:** After every `POST /v1.0/applications` call, immediately run:
+```bash
+curl -sk -X POST \
+  -H "Authorization: Bearer $TOKEN" \
+  -H "Content-Type: application/json" \
+  "https://graph.microsoft.com/v1.0/applications/{APP_OBJ_ID}/owners/\$ref" \
+  -d '{"@odata.id":"https://graph.microsoft.com/v1.0/directoryObjects/f34ebe40-9565-4135-af4c-2e808df57a25"}'
+```
+
+Mike's user object ID: `f34ebe40-9565-4135-af4c-2e808df57a25`