Sub-ticket of MSG-31 memory-lint.sh: refuse implicit host-wide scan as push gate (require explicit scope; only cron sweeps host-wide) · llmmsg-srv