fix: Add tr-worker files, sanitize IPs, update validation checklists

- Add realtime_qdrant_watcher.py and mem-qdrant-watcher.service to tr-worker/
- Sanitize private IPs (10.0.0.x → <QDRANT_IP>, <OLLAMA_IP>)
- Replace absolute paths with placeholders
- Add GIT_VALIDATION_CHECK.md for security validation
- Update validation checklists to v2.4
- Remove session.md from git (local-only file)

tr-worker/mem-qdrant-watcher.service

@@ -0,0 +1,19 @@
+[Unit]
+Description=OpenClaw Real-Time Qdrant Memory Watcher
+After=network.target
+
+[Service]
+Type=simple
+User=<USER>
+WorkingDirectory=<INSTALL_PATH>/tr-worker
+Environment="QDRANT_URL=http://<QDRANT_IP>:6333"
+Environment="QDRANT_COLLECTION=memories_tr"
+Environment="OLLAMA_URL=http://<OLLAMA_IP>:11434"
+Environment="EMBEDDING_MODEL=snowflake-arctic-embed2"
+Environment="USER_ID=<USER_ID>"
+ExecStart=/usr/bin/python3 <INSTALL_PATH>/tr-worker/realtime_qdrant_watcher.py --daemon
+Restart=always
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target