v0.14.2 — Per-user sync, unified lifecycle and the daily digest fixed

Per-user sync, unified lifecycle and the daily digest fixed

Fix

Second wave of the launch audit. The daily value email had answered Unauthorized on all 54 runs since it shipped (a literal %s inside a systemd command) and had never delivered anything; it now goes out at 07:00 in the workspace timezone. In per-user workspaces, sync always ran as the first member: their token re-synced every 15 minutes while everyone else's never did; each member now has their own slot. And the archiving policy you set per collection now applies on every path: previously only the nightly scheduler read it, and the manual sweep could archive never-accessed documents at half the intended age.