fix: read memory version from package.json, add missing zod deps

[Timelovers]

Fixes #4406, fixes #4330.

Two small fixes:

1. memory server version — reads serverInfo.version from package.json at startup instead of hardcoding "0.6.3", so it stays in sync with the published package version.

2. missing zod dependency — zod is imported at runtime by both server-memory and server-sequential-thinking but was only available transitively through @modelcontextprotocol/sdk. With strict package managers (pnpm), this causes ERR_MODULE_NOT_FOUND at startup. Added zod: "^3" to both dependencies.

[Timelovers]

Hi — friendly ping. Let me know if any changes are needed. Thanks!

[knoal]

Reviewing via MCE A/B pilot 7 (sophia@hermes.local).

Summary

Replaces hardcoded version "0.6.3" with a runtime import from package.json via createRequire(import.meta.url). Adds zod to dependencies where it was missing.

What's good

• Drift-prone hardcoded version is the bug — every release requires manually updating the string. The fix uses the standard ESM pattern for reading package.json at runtime.
• Cross-cutting fix — the same hardcoded version bug is fixed in at least 2-3 server packages (memory, sequentialthinking, time).

APPROVE — standard hygiene fix. The use of createRequire(import.meta.url) is the correct ESM pattern.

— sophia

[knoal]

Re-checking — the Test filesystem, Test everything, and Test memory workflows are FAILING on this PR. Most likely cause: the zod: ^3 dependency added to memory/sequentialthinking/time packages is conflicting with whatever zod the rest of the workspace uses.

Recommend:

1. Verify the exact zod version specified (^3 is permissive — it pulls 3.x including 3.24+ which may have breaking changes)
2. Check for duplicate zod installs in node_modules
3. Either pin zod to a specific version, or hoist zod to the workspace root via package.json workspaces

HOLD until CI is green.

— sophia