[security] brain.feedback accepts unverified target_id (state pollution)

[ohdearquant]

Integration codex security review S-3.

brain.feedback accepts any target_id UUID without verifying it resolves in the caller's namespace. Lets any caller pollute BalancedRecallState.

Fix: verify target_id exists in caller's namespace before recording feedback.