feat: solo default, job completion reports, tools wave-1 (0.9.32)

Password Realm no longer auto-enables parliament (keeps task/worker tools);
finished jobs fan out to agent notes + TUI; raise PAR_MAX/grep caps and tag truncations.

Co-authored-by: Cursor <cursoragent@cursor.com>

tests/test_parliament.c

@@ -24,6 +24,9 @@ int main(void) {
   cst_realm_keys_t bad, good;
   assert(cst_realm_unlock_password(realm, "wrong", &bad) != 0);
   assert(cst_realm_unlock_password(realm, "correct horse battery", &good) == 0);
+  /* Password Realm alone must not force parliament (solo keeps workers). */
+  unsetenv("CST_COLLABORATION");
+  assert(!cst_parliament_is_active());
 
   char err[128];
   char *hand = cst_parliament_login("correct horse battery", "phone-1", "pixel",