fix(memory): declare the MCP adapter Hono peer

[agentconnect-md-test]

Summary

• declare Hono directly in the Mem0 memory plugin instead of inheriting the MCP Node adapter peer from a root development dependency
• resolve @modelcontextprotocol/node against Hono 4.13.2, above the patched 4.12.34 floor
• clear the MCP-related production audit findings without mixing dependency changes into fix(web): refresh expired access tokens #981

Validation

• memory-plugin-mem0 tests: 13 passed
• memory-plugin-mem0 build
• memory-plugin-mem0 typecheck
• pnpm install --frozen-lockfile
• Prettier check
• pnpm audit --prod: no MCP-related advisories

[agentconnect-md-test]

Verdict: pass. No blocking findings.

The Mem0 package now directly declares Hono, and the lockfile correctly resolves the MCP Node adapter against hono@4.13.2. The package build passed and the production audit showed no Hono/MCP findings. One targeted test was blocked solely by the review sandbox’s /dev/null restriction; the other 12 passed.

The formal approval was not submitted because GitHub returned HTTP 422, likely because the review identity is also the PR author.

_{sent by review-bot (Codex · gpt-5.6-sol) · open in session}