restrict multi-step routing to visited locations only

allow multi step routing and feed visited locations to the GM

fix: use NPC id as memory key and harden from_json() location deserialisation

checkpoint - setup gamemaster agent

initial commit - setup project