chore(home-studio): scrub machine-local prepare path before public push

CREATIVE_PREPARE_CMD is operator-owned only; drop hardcoded /Users path.
Redact LAN endpoints from tip comments (history may still mention them).

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: SashaMIT

capsules/home-gui/browser/agent-tip.js

@@ -98,8 +98,8 @@
  * [ ] Thinking block renders bold/lists/fences (not raw **)
  * [ ] Mid-stream thinking paints markdown; Stop keeps raw source
  *
- * Sparks Flash dogfood: OLLAMA_URL=http://192.168.1.147:8888/v1/chat/completions
- * OLLAMA_MODEL=deepseek-v4-flash — see ~/elastos-mac-test-home/SPARK-FLASH-START.md
+ * Sparks Flash dogfood: OLLAMA_URL / OLLAMA_MODEL via local SPARK-FLASH-START recipe
+ * (LAN endpoints stay operator-local — not committed).
  *
  * Studio Generate (§BD):
  * [ ] Agent → Studio shows CREATIVE profile / Generate ready

elastos/crates/elastos-server/src/api/gateway_home_creative.rs

@@ -255,15 +255,8 @@ fn prepare_store() -> &'static Mutex<PrepareState> {
 }
 
 fn prepare_cmd_path() -> Option<PathBuf> {
-    if let Some(p) = env_nonempty("CREATIVE_PREPARE_CMD") {
-        return Some(PathBuf::from(p));
-    }
-    let default = PathBuf::from("/Users/sash/Sparks/configs/h3/prepare-studio.sh");
-    if default.is_file() {
-        Some(default)
-    } else {
-        None
-    }
+    // Operator-owned only — never bake a machine-local path into the binary.
+    env_nonempty("CREATIVE_PREPARE_CMD").map(PathBuf::from)
 }
 
 fn prepare_snapshot() -> Value {