chore: land tree view-state, vault, Pi module split, and repo hygiene

Persist PageTree expand state via control-plane view-state and align
chevron/DOM with restored expansion; keep Sidex-style shallow page-tree
scan and drop the unused recursive scanner that only added cargo noise.

Add password vault workbench routes/runtime/skill/CLI, split page_ai_pi
into a module package, and retire Hermes/ACP/OpenHub recycle + root
harness evidence from the index while gitignoring recycle and local
diag dumps.

Archive superseded design/bugs docs under old/, point architecture at
ARCHITECTURE.md, and refresh smokes for Pi S1–S7, vault, and editor
regressions so the working tree can stay clean.

scripts/task-ai-management-control-plane-static-smoke.js

@@ -390,9 +390,9 @@ check(
 
 check(
   "admin settings requires admin authorization",
-  aiSettingsRs.includes("ensure_admin(&context)?") &&
-    aiSettingsRs.includes("is_local_access_policy_admin_context"),
-  "GET/PUT 都复用现有管理员鉴权"
+  aiSettingsRs.includes("ensure_admin(&state, &context)?") &&
+    aiSettingsRs.includes("current_actor_is_local_admin(state, context)"),
+  "GET/PUT 都复用 session 优先的管理员鉴权"
 );
 
 check(