v3.2.1

## Engram 3.2.1

Core binary publication for v3.2.0 was blocked by obsolete module checksums, although its Cloud image was published. This recovery release fixes the module-tidiness guard without changing resolved dependency versions (#1700). The existing v3.2.0 tag is preserved.

This release brings new, opt-in diagnostics and reliability fixes across the Go core, Cloud replication, setup, and session handling.

### New diagnostics
- Add read-only Pi caller-binding diagnostics to distinguish caller/session evidence from project health, without registering sessions (#1695).
- Add opt-in server-side `mem_save` stage timings to separate save, candidate lookup, and relation insertion costs without logging memory content (#1689). These diagnostics help investigate #1536; they are not a latency fix.

### Fixes
- Preserve ownership metadata when replicating isolated project-owned sessions, and accept legacy blank or omitted directories on mutation pull while keeping chunk import and ownership checks strict (#1662, #1684, #1691).
- Tolerate slow but healthy hook session confirmation with a shared deadline (#1663).
- Scope Cloud upgrade diagnostics to the selected project (#1668).
- Restore Codex resumed-thread memory writes through server-owned continuations (#1612).
- Support explicit `directory` and `cwd` in MCP current-project discovery (#1656).
- Share per-save prompt-capture defaults, opt-out, and deduplication policy in Go (#1696).
- Normalize Unicode project names and support explicit legacy-variant repair (#1694).
- Consistently classify canonical manual-save ownership and repair case-variant session journal rows (#1652, #1678).
- Preserve OpenCode JSONC comments, trailing commas, and unrelated configuration when registering MCP (#1685).
- Refresh existing Claude Code plugins at user scope during setup (#1670).
- Report the actual binary version in the MCP handshake and accurate tool-profile counts (#1675).
- Keep shell scripts LF on Windows checkouts (#1669).

### Maintenance
- Add deterministic perf-ratchet flag, environment, and bootstrap-mode coverage (#1620).

### Upgrade and release scope
- Back up your Engram data and configuration before upgrading, and retain a known-good installation. Ownership corrections can change which sessions are permitted to write.
- This is the **Go core release**. Tag-driven automation publishes Linux, macOS, and Windows archives for amd64/arm64, checksums, the Homebrew formula, and Cloud container images.
- The Pi npm package has a separate release channel and is **not published by this release**. Pi extension changes on `main` are not automatically delivered to npm users.
- This release does not claim to resolve the still-open Pi/Claude resume reports.

**Full changelog:** https://github.com/Gentleman-Programming/engram/compare/v3.1.0...v3.2.1