fix(deepseek-plugin): first-turn recall, native activation, and cancel-safe recall (#7284, #7302)

Ports #7285 onto current main and adds a canDeliver() gate so a canceled recall does not mark undelivered memories as seen.

Refs #7284, #7302. Supersedes #7285.

integrations/deepseek-plugin/cordis.example.yml

@@ -1,17 +1,11 @@
-# Example DeepSeek Harness config that loads deepseek-plugin alongside the built-in
-# tools plugin. Load with:
-#
-#   DSH_HOME=/tmp/mem0-dsh-dev pnpm dlx @deepseek-ai/dsh@0.1.1-rc.2 \
-#     web --patch ./integrations/deepseek-plugin/cordis.example.yml
-#
-- insert:
-    - id: mem0
-      # Install the packed plugin into this disposable profile first; loading
-      # raw dist bypasses Harness's peer dependency installation.
-      name: "/tmp/mem0-dsh-dev/profiles/headless/node_modules/@mem0/deepseek-plugin/dist/index.js"
-      config:
-        # apiKey is read from the MEM0_API_KEY env var when omitted here.
-        userId: "your-user-id"
-        # autoRecall: true   # optional; enabled by default
-        # autoCapture: true  # optional; enabled by default
-        # host: "https://your-onprem.mem0.ai"   # optional: Platform on-prem / dedicated base URL
+# Optional override for the mem0 row installed by dsh.bundle.
+# Copy this file, then use: dsh web --patch /absolute/path/to/cordis.yml
+- id: mem0
+  config:
+    # Replacing a row's config requires restating its userId.
+    # apiKey is read from MEM0_API_KEY when omitted here.
+    userId: !!js process.env.MEM0_USER_ID
+    memoryScope: workspace  # optional; default is user (shared across workspaces)
+    # autoRecall: true
+    # autoCapture: true
+    # host: "https://your-onprem.mem0.ai"  # Mem0 Platform dedicated deployment