chore: public-readiness cleanup

- Remove default Grafana password (fail loudly if unset)
- Clean up stale delivery-proof TODO (already implemented at RPC layer)
- Document TUI send as local-only, point to REPL for E2E delivery
- Gitignore AI workflow files (CLAUDE.md, master-prompt.md, ai_team.py)
- Remove 5 orphaned v1 crates (bot, ffi, gen, gui, mobile)
- Commit ROADMAP.html updates

.env.example

@@ -16,5 +16,5 @@ QPQ_SEALED_SENDER=false
 QPQ_REDACT_LOGS=true
 QPQ_WS_LISTEN=
 
-# Grafana admin password
-GRAFANA_ADMIN_PASSWORD=changeme
+# Grafana admin password (required — must be strong, no default)
+GRAFANA_ADMIN_PASSWORD=