- Replace findSpaceMemoryConfig inline call with getMemoryProviderConfig(deps, actor) - Add owner gate: space members get 403, owners get config - Add authorization tests for providerConfig/connectProvider/setDefaultScope/disconnectProvider - Add wiring test to ensure router.ts uses the owner-gated handler