Remove unapproved inherited runtime identities - #208

Summary

Remove inherited runtime identities and operational dependencies while retaining Radius, Pi-supported catalogs, provider attribution, OpenAI Codex OAuth, and xAI OAuth.

Companion cloud PR: https://github.com/diffexai/diffex-cloud/pull/149

Reasoning

The release audit retires the former security/staff exceptions and requires an exact candidate handoff before publication.

Retained OpenAI Codex and xAI OAuth.

Existing telemetry removal and canonical release discovery remain the baseline.

Changes

• Remove Gondolin and its dependency graph, legacy extension aliases/theme symbol, upstream sharing guidance, and inherited security/staff ownership.
• Authorize issue analysis through current-repository write/admin permission and fail closed on lookup errors.
• Use Diffex export metadata and preserve historical changelog link destinations without editing released changelogs.
• Add an exact source identity gate and reproducible local artifact preparation, terminal acceptance, and identity scans.
• Record all eleven tarball hashes, macOS arm64 executable/archive hashes, 40 providers, reviewed raw/decoded source-map occurrences, and cloud deployment provenance.

Extensions using legacy Pi imports must switch to canonical @diffexai imports.
HTML wrappers must use the Diffex metadata keys; old sidebar-width preferences are not migrated.
The artifact review identifies five incidental third-party lexical contexts separately, including Jiti's external agent detector; these do not expand the approved runtime allowlist.

Testing

• npm run check, full isolated ./test.sh, and npm run build:offline passed.
• Ten focused identity and issue-authorization tests passed; workflow tests reproduced the inherited-token failure before the fix.
• All eleven local tarballs installed outside the workspace with local overrides and lifecycle scripts disabled.
• Node and macOS arm64 Bun passed 12 smoke checks covering startup, listing, controlled prompt/reply, retained account-menu entries, no-release behavior, and clean exit.
• Source scan passed with 17 exact retained matches; packaged bytes and decoded source maps have a committed occurrence review and verified hashes.
• Shared cloud/CLI contract validation passed.

Live login and inference were skipped at the owner's request.
Provider-boundary tests and the controlled local provider do not establish live-provider acceptance.
No release, npm package, source archive, hosted image, or deployment was published.