docs: scrub the sidebar-agent ghost from comments and CLAUDE.md

20+ comments across 10 files still described the deleted sidebar-agent.ts as a
live process — including load-bearing architecture claims ('IMPORTED ONLY BY
sidebar-agent.ts', 'sidebar-agent fills this in on first prompt-injection
load', 'kill sidebar-agent' in shutdown docs) and ~60 lines of tombstone
blocks in server.ts enumerating deleted identifiers by name (a false grep
surface: searching processAgentEvent hit server.ts and looked live).

CLAUDE.md's security-stack section now documents the LIVE architecture: L1-L3
content filters + testsavant via the security sidecar subprocess; the
L4b/ensemble rows, the GSTACK_SECURITY_ENSEMBLE knob, and the 721MB DeBERTa
download are gone (deleted as dead code this wave) with an explicit
do-not-re-document note; attempts.jsonl is correctly attributed to
tunnel-denial-log.ts; the no-live-writer status of classifierStatus is stated.

Comments that survive now describe what IS, not what WAS: the promotion gate
in domain-skills.ts explains why classifier_score>0 is load-bearing given no
L4 load-time scan exists; file-permissions.ts names real sensitive files.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

extension/sidepanel.js

@@ -2,8 +2,7 @@
  * gstack browse — Side Panel
  *
  * Terminal pane (default): live claude PTY via xterm.js, driven by
- * sidepanel-terminal.js. The chat queue + sidebar-agent.ts were ripped
- * in favor of the interactive REPL — no more one-shot claude -p.
+ * sidepanel-terminal.js.
  *
  * Debug tabs (behind the `debug` toggle): activity feed (SSE) + refs +
  * inspector. Quick-actions toolbar (Cleanup / Screenshot / Cookies)
@@ -994,8 +993,7 @@ inspectorSendBtn.addEventListener('click', async () => {
   }
 
   // Inject into the running claude PTY so the user can ask claude to act
-  // on the inspector data. Replaces the old `sidebar-command` route which
-  // spawned a one-shot claude -p (sidebar-agent.ts is gone).
+  // on the inspector data.
   //
   // Pre-scan via /pty-inject-scan before injection (D6, closes #1370).
   // gstackScanForPTYInject is async; gstackInjectToTerminal stays sync.
@@ -1022,9 +1020,6 @@ inspectorSendBtn.addEventListener('click', async () => {
  * "Cleanup" injects a prompt into the running claude PTY. claude takes the
  * prompt, snapshots the page, hides ads/banners/popups, leaves article
  * content. The user watches it happen in the Terminal pane.
- *
- * Replaced the old chat-queue path (sidebar-agent.ts spawning a one-shot
- * claude -p) — we have a live REPL now, so route through that instead.
  */
 async function runCleanup(...buttons) {
   buttons.forEach(b => b?.classList.add('loading'));