chore: public-readiness cleanup

- Remove default Grafana password (fail loudly if unset)
- Clean up stale delivery-proof TODO (already implemented at RPC layer)
- Document TUI send as local-only, point to REPL for E2E delivery
- Gitignore AI workflow files (CLAUDE.md, master-prompt.md, ai_team.py)
- Remove 5 orphaned v1 crates (bot, ffi, gen, gui, mobile)
- Commit ROADMAP.html updates

crates/quicproquo-client/src/client/v2_tui.rs

@@ -20,6 +20,9 @@
 //!   Ctrl+C / Ctrl+Q -- quit
 //!
 //! Feature gate: requires both `v2` and `tui` features.
+//!
+//! **Note:** Message display is currently local-only. Use the REPL client for
+//! end-to-end encrypted delivery. See `quicproquo-sdk::messaging` for the full pipeline.
 
 use std::time::Duration;
 
@@ -535,9 +538,11 @@ async fn handle_input(app: &mut TuiApp, client: &mut QpqClient, text: &str) {
         // Snap to bottom.
         app.scroll_offset = 0;
 
-        // TODO: actually send via SDK when the send pipeline is wired up.
-        // For now, emit a notification.
-        app.notification = Some(format!("Sent: {text}"));
+        // NOTE: TUI message display is local-only. The full MLS encryption
+        // pipeline (sealed sender + hybrid wrap + enqueue) is implemented in
+        // quicproquo-sdk/src/messaging.rs but is not yet wired into the TUI.
+        // Use the REPL client (`qpq repl`) for end-to-end message delivery.
+        app.notification = Some("Message queued locally (TUI send not yet wired to SDK)".to_string());
     }
 }