Summary

Closes #2303 — wave 2 of the MBP audit gut sweep. Removes ~1,200 LOC of dead-code stubs across src/cli, src/commands, and src/agents, and threads consumer cleanup through the call sites that still referenced the no-op exports.

remoteclaw --help no longer advertises the seven gutted ghost commands (models, skills, sandbox, secrets, clawbot, docs, approvals).

What was removed

• src/cli — 7 sub-CLI stubs + matching entries in register.subclis.ts
• src/commands
  • auth-choice* family (8 files, including the gutted-stub test files)
  • doctor-{bootstrap-size,memory-search,sandbox,gateway-auth-token}
  • model-default, google-gemini-model-default, openai-model-default, model-picker
  • gateway-install-token (and the duplicate at src/gateway/gateway-install-token.ts)
• src/agents
  • pi-extensions/ (zero importers)
  • pi-embedded-helpers.ts + pi-embedded-helpers/ (importers rewritten to use agent-helpers/ directly; transcript-policy.ts inlines a local isGoogleModelApi no-op)
  • pi-embedded-block-chunker.ts (replaced by a local no-op stand-in inside discord/monitor/message-handler.process.ts)
• Memory secret targets — drop getMemoryCommandSecretTargetIds since the memory CLI was removed in gut: remove dead memory CLI (MBP audit) #2300
• Docs — remove the stale ## Memory section from docs/cli/index.md

Threaded consumer cleanup

Each of these files had real call sites referencing the now-deleted gutted exports. The PR inlines the appropriate gutted no-op or drops the dead branch:

• src/commands/doctor.ts, doctor-gateway-services.ts, doctor-gateway-daemon-flow.ts
• src/commands/configure.gateway-auth.ts (shrinks promptAuthConfig to a passthrough)
• src/commands/configure.daemon.ts, onboard.ts, onboard-non-interactive/local/daemon-install.ts
• src/cli/program/register.onboard.ts, src/cli/daemon-cli/install.ts
• src/wizard/onboarding.finalize.ts (and its test)
• src/agents/tools/subagents-tool.ts

Scope notes (deferrals)

• src/auto-reply/* stubs from the original issue body had already been removed in an earlier wave, so this sweep skips them.
• pi-embedded.ts, pi-embedded-runner/, and skills/refresh.ts retain thin no-op stubs. ~10 real-code consumers (auto-reply runner, gateway server methods, tts-core, agent.test.ts, etc.) still reference their symbols. Fully removing them would require rewriting those consumers (~8K LOC) and is out of scope for this PR. The forensics in the issue body underestimated their importer count.
• doctor-workspace.ts keeps detectLegacyWorkspaceDirs / formatLegacyWorkspaceWarning (real code) and only drops the gutted MEMORY_SYSTEM_PROMPT exports.

Tests touched

• Removed configure.gateway-auth.prompt-auth-config.test.ts (covered the dead model/auth-choice branches)
• Removed auth-choice.apply.{openai,byteplus,volcengine}*.test.ts (gutted-stub tests for now-deleted files)
• Updated register.subclis.test.ts to assert against nodes instead of the removed clawbot placeholder
• Updated register.onboard.test.ts, wizard/onboarding.finalize.test.ts, onboard-non-interactive.provider-auth.test.ts to drop mocks/imports of deleted modules

Test plan

• pnpm tsgo — clean
• pnpm lint — 0 warnings, 0 errors
• pnpm format:check — clean
• pnpm test — 727 test files, 6358 tests passing
• remoteclaw --help — no ghost commands shown

Refs #2303