feat(odin): Phase 2a read-only agentic assistant + tool-trace UI

- agentic chat loop (max 6 round-trips, budget re-checked between iterations)
  over 10 read-only, permission-delegated tools in src/services/ai-tools.ts
- persist assistant tool trace in ai_chat_messages.content_json (+ migration)
- consulted-tools chips in OdinThread; header now shows month spend only
  (budget cap hidden from the UI, server-side 402 guard unchanged)
- seed: ai.use permission; Settings exposes the ai permission module
- docs: REVIEW consolidation; deployment-guide.md superseded by docs/release.md

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

src/admin/lib/queries/ai.ts

@@ -23,6 +23,10 @@ export interface StoredChatMessage {
   role: "user" | "assistant";
   content: string;
   created_at: string;
+  /** Parsed content_json — the assistant turn's tool trace, when present. */
+  meta?: {
+    tools?: { name: string; label: string; ok: boolean }[];
+  } | null;
 }
 
 export const aiUsageOptions = () =>