personal memory agent

pairing: add token store + key crypto + device store master