Cross-project memory disclosure via noncanonical path hashing

Information disclosure in DeepMyst Mysti 0.4.0 and earlier allows local users to read another project's memory via a reused workspace alias. MemoryManager.initProjectMemory hashes the literal workspacePath into a truncated directory key without resolving its real path, causing different real workspaces opened through the same alias to load the same MEMORY.md. Exploitation requires a shared home directory and control or reuse of the alias between sessions; it exposes stored project memory and permits poisoning of later agent context.