chore(cursor): add Trilium MCP template and ignore local secrets

Co-authored-by: Cursor <cursoragent@cursor.com>

.cursor/mcp.json.example

@@ -0,0 +1,14 @@
+{
+  "mcpServers": {
+    "triliumnext-mcp": {
+      "command": "npx",
+      "args": ["-y", "triliumnext-mcp"],
+      "env": {
+        "TRILIUM_API_URL": "http://127.0.0.1:37840/etapi",
+        "TRILIUM_API_TOKEN": "<paste-from-trilium-settings>",
+        "PERMISSIONS": "READ;WRITE",
+        "VERBOSE": "false"
+      }
+    }
+  }
+}

.cursor/rules/trilium-notes.mdc

@@ -0,0 +1,12 @@
+---
+description: >-
+  Trilium 笔记维护。结构：收集箱/工作（Oclaw·NETX 各挂技术文档，NAS 项目）/生活/资料/归档。禁止改动 Demo、Default、Journal、博客。
+alwaysApply: false
+---
+
+# Trilium 笔记维护
+
+- MCP：`triliumnext-mcp`（`.cursor/mcp.json`）
+- 规范：`skills/_workspace/generalist/knowledge-base-manager/SKILL.md`
+- **禁止改动**：Trilium Demo、Default、Journal、博客（`#kb/immutable`）
+- 仓库文档同步：`.\scripts\import_oclaw_netx_docs_to_trilium.ps1`（`-Update`）