refactor: nuke dead exports, dead files, dead DB column, dead zero-value wrappers

Full-codebase ts-prune + manual audit sweep. Every change below is a pure
deletion (or a 2-line re-wire where a dead function was supposed to be
alive). No scope additions.

Dead wrappers / phantom features
  - shouldAutoApproveApproval: zero-value wrapper over shouldAutoApprove.
    Four call sites now import shouldAutoApprove from execution-policy
    directly.
  - evaluateRotation(session, connectorId, thresholdsOverride): the
    connectorId arg was never read (underscored), and thresholdsOverride
    was only exercised by the test suite — no production caller. Signature
    collapses to evaluateRotation(session). DEFAULT_THRESHOLDS /
    RotationThresholds exports and their tests go with it.
  - installLogRedactor: defensive console wrapper that was never wired
    from worker-entry. buildRedactor handles the known threat (env-value
    leaks); the pattern-based redactTokens stays for tests and future
    composition.

Dead files
  - resume-interrupted-tasks.ts: helper function never imported.
  - service-graph-orchestration-deps.ts: three factory closures
    superseded by the inline closures in create-orchestration-service.

Dead exports
  - listConnectorsByAuthKind (shared/connector-catalog)
  - getLocalePromptInstruction + whole localization.ts file
  - ImportantDocType
  - main-side ConnectorAuthKind (duplicated the shared one; not referenced)
  - CheckpointEngineService, RunHousekeepingService types
  - WorkspaceResolution type
  - cmdOrCtrlSymbol
  - AgentEventPush, CredentialPayload type aliases
  - parseApprovalPayloadJson, parseEnvValue, ProviderCard
  - getSOP — buildSOPSection reads the SOPS map directly; the individual
    getter had no callers. Deduped to a flat array.
  - renderWakeReason in wake-reasons/en.ts: byte-for-byte duplicate of the
    one in wake-reasons/index.ts.

Forgotten wiring (not cleanup, but adjacent)
  - registerAgentStandupRoute: the GET /api/agents/me/standup endpoint is
    advertised in every system prompt and wake-reason doc, but the route
    handler was never registered in api-server/index.ts. Agents have been
    hitting 404 since Pi Mono. Registered.

Dead DB column
  - v44 migration drops runs.context_snapshot_json. Column was added by
    v16-v25, never written or read, and v43's deliberate preservation
    was an interim measure. Same idempotent table-rebuild pattern as
    v41/v43.

Test tree
  - Phantom-feature threshold override tests removed (3). The rest of
    the rotation suite re-expressed against the real maxRuns=20 floor.

495/495 unit tests pass. typecheck + build clean.

src/renderer/components/execution/ModelManagementShared.tsx

@@ -1,4 +1,3 @@
-import { CaretDown, CaretRight } from "../ui/icons";
 import type { ProfileSnapshot } from "@shared/types";
 import { Input } from "../ui";
 import { useT } from "../../i18n";
@@ -17,11 +16,6 @@ export interface ModelEntry {
 
 export type ConnectorStatus = ProfileSnapshot["connectors"][number]["status"];
 
-export function parseEnvValue(text: string, key: string): string {
-  const line = text.split(/\r?\n/).find((l) => l.startsWith(`${key}=`));
-  return line ? line.slice(key.length + 1) : "";
-}
-
 /* ------------------------------------------------------------------ */
 /*  StatusBadge                                                        */
 /* ------------------------------------------------------------------ */
@@ -68,45 +62,6 @@ export function StatusBadge({ status }: { status: ConnectorStatus }) {
   );
 }
 
-/* ------------------------------------------------------------------ */
-/*  ProviderCard                                                       */
-/* ------------------------------------------------------------------ */
-
-export function ProviderCard({
-  title,
-  badge,
-  expanded,
-  onToggle,
-  children,
-}: {
-  title: string;
-  badge: React.ReactNode;
-  expanded: boolean;
-  onToggle: () => void;
-  children: React.ReactNode;
-}) {
-  return (
-    <div className="overflow-hidden rounded-lg border border-border bg-card">
-      <button
-        type="button"
-        onClick={onToggle}
-        className="flex w-full cursor-pointer items-center justify-between px-4 py-3 transition hover:bg-muted/50"
-      >
-        <div className="flex items-center gap-2.5">
-          {expanded ? (
-            <CaretDown size={14} className="text-muted-foreground" />
-          ) : (
-            <CaretRight size={14} className="text-muted-foreground" />
-          )}
-          <span className="text-[13px] font-semibold text-foreground">{title}</span>
-        </div>
-        {badge}
-      </button>
-      {expanded && <div className="space-y-3 px-4 pb-4">{children}</div>}
-    </div>
-  );
-}
-
 /* ------------------------------------------------------------------ */
 /*  Toggle switch                                                      */
 /* ------------------------------------------------------------------ */

src/renderer/components/execution/execution-utils.tsx

@@ -1,20 +1,11 @@
-import type { ApprovalRecord } from "@shared/types"
 import {
   Robot, CheckSquare, Play, ShieldCheck, Gear, FolderOpen, Key, Target, Briefcase, Buildings,
 } from "../ui/icons"
-import { safeJson } from "../../lib/safe-json"
 
 export function describeActionError(error: unknown) {
   return error instanceof Error ? error.message : "The action could not be completed."
 }
 
-export function parseApprovalPayloadJson(approval: ApprovalRecord): Record<string, unknown> | null {
-  if (!approval.payloadJson) return null
-  const parsed = safeJson<unknown>(approval.payloadJson, null)
-  if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) return parsed as Record<string, unknown>
-  return null
-}
-
 export const ENTITY_ICONS: Record<string, typeof Robot> = {
   agent: Robot, task: CheckSquare, run: Play, approval: ShieldCheck, connector: Gear,
   workspace: FolderOpen, secret: Key, goal: Target, project: Briefcase, company: Buildings,