chore(docs): refresh stale docs, fix deploy config, commit demo-seed

[iaj6]

Doc/config drift flagged by the July audit:

• CLAUDE.md was the stalest file in the repo and actively misled agent
  sessions: claimed 6 policy types incl. a nonexistent RequiredApproval
  (actual: 8, with guard/check modes), "eight tables" (actual: 16 — the
  whole auth/webhook/audit/budget layer was missing), no mention of the
  auth model, login/doctor/user/admin/cleanup commands, or the transcript
  cost pipeline. Also marks the jobs/locks/dispatch layer as vestigial
  and documents the stale-dist gotcha for web tests.
• CHANGELOG now covers the June audit sweep (PRs fix(web,cli): close 5 auth/injection findings from full review #1-fix(deps): bump better-sqlite3 to 12.11.1 + CI Node to 22 (Node 26 support) #16) and the July
  revival audit (PRs fix(cost): repair the cost pipeline — pricing table, transcript dedupe, path source #17-fix(db): cascade policy_results when deleting a policy (FK 500) #23); previously it stopped before both.
• agentops serve printed "The API is currently unauthenticated" when
  binding beyond localhost — false since the auth layer shipped. The
  warning now says what's true: auth is required, but traffic is plain
  HTTP, so use the caddy profile beyond a trusted LAN.
• Litestream sidecar mounted the DB read-only, which breaks replication
  outright (litestream needs the checkpoint lock + sidecar files). Now
  rw, with a comment explaining why. The S3-compatible endpoint comment
  now says explicitly that setting AGENTOPS_S3_ENDPOINT alone does
  nothing while the config line stays commented.
• scripts/demo-seed.mjs (previously untracked) is committed, now gated
  behind --yes since it wipes runs/events/policy_results/run_metrics.
• packages/cli/src/build-info.ts is generated on every build, so the
  working tree was permanently dirty. Gitignored; the generator now also
  runs as pretest so fresh clones can run cli tests before a build.

Co-Authored-By: Claude Fable 5 noreply@anthropic.com