Core에서 내장 스마트 연락처를 제거하고 cindy-contacts 플러그인으로 이관

# Retire Built-in Smart Contacts (moved to `cindy-contacts` plugin)

## 1. Remove contacts segment from Harness system prompts

**Files:** `maker-core/src/harness/prompts/claude-code.ts`, `codex.ts`, `pi.ts` (or equivalent prompt builders)

- Delete the `## Contacts` / smart-contacts section from each Harness system prompt template.
- Remove any prompt-builder helpers that only existed to render the contacts segment (e.g. `renderContactsSegment`, `buildContactsContext`).
- Update prompt snapshot tests to drop the contacts block.

## 2. Remove `cindy_contacts` MCP server

**Files:** `lizi-mcps/src/servers/cindy-contacts/*`, MCP registry, approval policy table

- Delete the `cindy_contacts` MCP server implementation and its tool registrations (`find`, `get`, `list`, `stats`, `find_duplicates`, `groups`, plus write/merge/delete/import tools).
- Remove its entry from the MCP server registry and from the approval policy table.
- Remove the built-in plugin registry entry for `cindy-contacts`.

## 3. Remove maker-core `contacts/` data layer

**Files:** `maker-core/src/contacts/**`

- Delete the entire `contacts/` module (repositories, schemas, migrations other than `ownerNamespaceMigration`).
- **Keep** `ownerNamespaceMigration` and ensure it still migrates `maker-contacts/contacts.db` (legacy DB path unchanged, read-only for plugin import).
- Remove exports from `maker-core/src/index.ts` that referenced the deleted module.

## 4. Remove Desktop contacts main-process module

**Files:** `desktop/src/main/contacts/*`, IPC registration, preload

- Delete the contacts main-process module.
- Remove all `maker:contacts:*` IPC handlers and their channel constants.
- Remove the corresponding preload API surface (`window.maker.contacts.*` or equivalent) and its type declarations.

## 5. Remove settings-page block

**Files:** `desktop/src/renderer/settings/**`

- Delete the contacts settings block/component and its route/registration.
- Remove related locale keys (see §9).

## 6. Remove Telegram settings hint and group speaker auto-registration

**Files:** Telegram integration in `desktop/src/main/telegram/*` and settings UI

- Remove the "smart contacts" settings hint shown in the Telegram settings panel.
- Remove group speaker auto-registration logic that called into the contacts layer.

## 7. Retire `contacts-sync/` driver; move device sync keys

**Files:** `contacts-sync/**` → `device-sync-keys/**`

- Delete the `contacts-sync/` driver: LAN transport, codec worker, and its build entry (remove from bundler/worker config).
- **Move** device sync key/crypto primitives to a neutral `device-sync-keys/` module:
  - Keep the **key filename unchanged**.
  - Keep **HKDF parameters unchanged** (same salt/info/length).
- Add a crypto test for the moved primitives (round-trip derive/encrypt/decrypt, key filename assertion, HKDF output vector).

## 8. Device-link: drop and reserve `device-link:contacts:sync:v1`

**Files:** `device-link/src/**`

- Stop forwarding incoming `device-link:contacts:sync:v1` frames; drop them at the handler boundary.
- Reserve the channel name (add to a reserved-channels constant with a comment noting it's retired).
- Add/adjust a test asserting the frame is dropped and the channel is reserved.

## 9. Retire builtin toolset selections

**Files:** toolset selection logic (e.g. `maker-core/src/toolsets/*`)

- Add `isRetiredBuiltinToolset(name)` returning true for `contacts`.
- On load, auto-remove saved `contacts` builtin toolset selections from persisted settings.
- Add a test covering migration of a saved selection containing `contacts`.

## 10. Allowlist plugin read-only tools via `ghost_call`

**Files:** approval policy table (same table as Cindy Art first-party allowlist)

- Add `cindy-contacts` read-only tools to the allowlist: `find`, `get`, `list`, `stats`, `find_duplicates`, `groups` (only when `action=list`).
- Writes, merges, deletes, and imports remain per-call approval.
- Rewrite the MCP approval test to target the plugin: assert read-only tools auto-approve via `ghost_call`, and write/merge/delete/import require approval.

## 11. Docs and strings

- Remove contacts entries from the help KB.
- Remove locale strings for the settings block, Telegram hint, and contacts UI.
- Remove glossary entries for smart contacts.
- Remove rule docs describing the built-in contacts feature.

## 12. Tests

- Delete tests for all removed code (contacts data layer, MCP server, IPC, settings block, Telegram auto-registration, `contacts-sync/`).
- Add the crypto test for `device-sync-keys/` (§7).
- Rewrite the MCP approval test for the plugin (§10).
- Add the device-link drop/reserve test (§8) and the retired-toolset test (§9).

## 13. Verification

Run and fix until green:

- `tsc` across `maker-core`, `lizi-mcps`, `device-link`
- Desktop typecheck
- `pnpm test:unit:related`
- Hygiene check
- Design check
- i18n check
- Help-KB check
- DCO check