refactor(relay): remove Relay V1 and registryctl

[jeremi]

Summary

• Delete Relay V1, registryctl, and the orphaned registry-config-report, registry-platform-ops, and registry-platform-pdp crates, then regenerate the workspace lockfile and dependency policy.
• Remove V1 language-server/editor activation, fixtures, CI shards, operational wiring, release locks, image-lock tooling, PostgreSQL and OIDC conformance, upgrade validators, and pre-v0.19 executable release compatibility.
• Move current release validation, publication, retry, and repeatability to the v0.19+ candidate model with an immediate pre-v0.19 tag/archive diagnostic.
• Rename and update the protected-read Evidence fixture to the Relay V2-shaped records contract without changing Evidence authorization, signing, response, or disclosure semantics.
• Amend current docs and the accepted retirement decision while preserving immutable historical manifests, notes, completed exercises, archives, redirects, public-package denylist entries, and Relay V2's stable registry-relay identifier namespace.

Compatibility and security review

Relay V2 routes, sealed-package contracts, authorization decisions, audit ordering, read-only SQLite source boundary, image identity, and relayctl commands are unchanged. Evidence response, authorization, signing, and minimum-disclosure semantics are unchanged.

This removes retired authentication, policy, audit, and release-provenance paths. The maintained Relay V2 and Evidence security matrices were rerun after the closure, including fail-closed audit behavior, authorization boundaries, source neutrality, verifier portability, and HTTP acceptance.

Validation

• cargo metadata --locked --format-version 1 --no-deps
• cargo fmt --check
• cargo check --locked --workspace --all-targets
• cargo clippy --locked --workspace --all-targets -- -D warnings
• cargo test --locked --workspace
• cargo deny check
• Relay V2 product contracts and HTTP acceptance
• Evidence contracts, source neutrality, verifier portability, authoring, fixture, and tutorial checks
• 224 release-script tests, current manifest validation, source-model proof, 109-gate inventory, and Debian 13 image contract
• CI classifier tests and actionlint
• VS Code unit/integration tests and editor installer tests, including stale-registryctl negative cases
• Full docs generation, test, Markdown/style, tutorial dry-run, build, and link checks
• Repository-wide residual audit with only the documented historical, redirect, V2-identifier, public-package-denylist, and negative-test allowlists remaining

This PR is intentionally atomic and must not be merged partially.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 4552d6ac71

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".