fix(skills): resolve session resolution, add cancelled event status, and scope mqtt topic

.mam.env.example

@@ -13,6 +13,10 @@
 #
 # SECURITY: never put real secrets in this template. Secret-bearing vars use a
 # `replace_me` placeholder — fill them in only in your local `.mam.env`.
+# SECURITY NOTE:
+# The default MQTT broker (broker.hivemq.com) is public and unencrypted. Job event
+# payloads (including task details) sent to the default broker can be read by anyone.
+# For production or private workloads, configure a private broker with TLS and Auth below.
 # ---------------------------------------------------------------------------
 
 # ===========================================================================
@@ -23,10 +27,6 @@
 #default: <workspace>/.mam/agent-sessions.yaml
 # AGENT_SESSIONS_YAML=/path/to/workspace/.mam/agent-sessions.yaml
 
-# Where the monitor (reconcile.sh) keeps its drift-state cache.
-#default: <workspace>/.cache/multi-agent-mux-monitor
-# AGENT_SESSIONS_STATE_DIR=/path/to/workspace/.cache/multi-agent-mux-monitor
-
 # Root directory that holds Claude Code per-project conversation logs (*.jsonl).
 #default: $HOME/.claude/projects
 # CLAUDE_PROJECT_DIR=$HOME/.claude/projects
@@ -35,11 +35,6 @@
 #default: $HOME/.local/bin
 # LOCAL_BIN=$HOME/.local/bin
 
-# tmux server socket name (`tmux -L <name>`). "default" = the normal tmux server
-# (no -L). Set this to opt into an isolated server for all skill tmux calls.
-#default: default
-# TMUX_SERVER_NAME=default
-
 # ===========================================================================
 # delegate-job / MQTT broker
 # ===========================================================================