feat: purge legacy agent hosts and land vault Chrome extension path

Retire ACP/Hermes/OpenCode surfaces and rename hermes_tools to
mnote_agent_tools so Page AI stays on Pi Lab only. Add Chrome vault
extension + extension token route, pre-release purge design, and soft-retire
legacy smokes for the small-group production cut.

scripts/task-page-block-ai-context-format-smoke.js

@@ -18,7 +18,7 @@ const {
 const OUT_DIR = path.join(process.cwd(), "tmp", "page-block-ai-context-format-smoke");
 
 async function callMnoteTool(request, payload) {
-  return requestJson(request, "/api/hermes/tools/mnote/call", {
+  return requestJson(request, "/api/mnote/tools/call", {
     method: "POST",
     headers: { "x-mnote-actor-id": payload.actorId || "smoke-user" },
     data: payload,
@@ -84,7 +84,7 @@ async function main() {
     evidence.workspaceId = target.workspaceId;
     await renameDocument(context.request, target.workspaceId, target.documentId, title);
 
-    const manifest = await requestJson(context.request, "/api/hermes/tools/mnote/manifest", {
+    const manifest = await requestJson(context.request, "/api/mnote/tools/manifest", {
       method: "GET",
       headers: { "x-mnote-actor-id": actorId },
     });
@@ -253,7 +253,7 @@ async function main() {
       contextAfter: blockXml.result.context.after.map((block) => block.blockId),
     });
 
-    const outOfScopeResponse = await context.request.fetch(`${BASE_URL}/api/hermes/tools/mnote/call`, {
+    const outOfScopeResponse = await context.request.fetch(`${BASE_URL}/api/mnote/tools/call`, {
       method: "POST",
       headers: {
         "content-type": "application/json",