feat(privacy): compile out all telemetry

[danspark]

What Changed

• Removed the default-on anonymous product analytics implementation and installation identifier generation.
• Compiled out browser, server, desktop, mobile, and relay trace/metric exporters, local trace persistence, and resource telemetry at stable Effect service boundaries.
• Removed Axiom infrastructure, tracing credentials, and release/build credential propagation.
• Preserved inert service contracts and native in-memory trace IDs used by relay error correlation, which keeps the patch rebase-friendly without exporting or persisting spans.
• Updated privacy/operations documentation and added source-level telemetry vendor/exporter invariants.

Why

This fork needs a strict T3 Code distribution that does not collect product analytics, export traces or metrics, persist local traces, sample host/process resources, or provision observability infrastructure. Keeping upstream call sites and contracts intact while replacing the centralized adapters with no-op layers minimizes recurring conflicts when rebasing onto upstream main.

Functional traffic is unchanged: provider CLIs, authentication, updates, relay connections, and push notifications still contact the services the user explicitly uses. Those flows are not T3 Code telemetry.

Checklist

• This PR is small and focused
• I explained what changed and why
• I included before/after screenshots for any UI changes
• I included a video for animation/interaction changes

Stack

This is not a stacked PR. It contains a two-commit downstream patch series: implementation first, invariant tests second.

Verification

• vp run --filter t3 --filter @t3tools/shared typecheck
• vp run --filter @t3tools/desktop --filter @t3tools/web --filter @t3tools/mobile typecheck
• vp run --filter t3code-relay typecheck
• Focused privacy suite: 10 files, 179 tests passed
• Server and web production builds with fake PostHog/Axiom credentials; artifact scan found no fake credentials, vendor endpoints, exporter headers, or OTLP exporter classes
• Expo public-config inspection confirmed no mobile observability credentials
• Release and relay-deploy workflow YAML parsed successfully

No visual UI or interaction changes were made, so screenshots and video are not applicable.

Generated with GPT-5 in the Codex harness. Local verification used Node 24.12.0 and pnpm 11.10.0; the repository declares Node ^24.13.1.

[github-actions]

Thread transfer impact

⚠️ The latest CI run did not produce a thread transfer result for 9c2587d.

This comment will update automatically after the next completed run.