docs: finish the v3.5 Pilot unhook — correct repo pointers, drop stale claims + client domains

[AVADSA25]

Follow-up to #302, clearing the last Pilot references. Three things.

1. A correction to #302

#302 rewrote "the code lives in the codec-pilot repo" into "preserved in git history", on the belief the repo didn't exist. It does — AVADSA25/codec-pilot holds the pilot-runner engine (checked out at ~/codec, last commit "docs: mark CODEC Pilot as development-parked"). I removed a true statement. Restored an accurate one in README (×2), CHANGELOG, and DEMO_SCRIPT:

the skill, route proxy, vendored copy, and PM2 entry were unhooked from this repo; the engine lives on in AVADSA25/codec-pilot.

2. Stale breadcrumbs

codec_dashboard.py still carried # G2 pilot_proxy → moved to routes/*.py and a "+ Pilot proxy" header note. pilot_proxy was deleted, not moved. Both dropped. (Comments only — no runtime effect.)

3. Stale public claims + client domains in FEATURES.md

• Intro still asserted a live "9-product system" and called Pilot "the 8th product" in present tense → now framed as v2.3 history with the v3.5 shape (7 products) stated plainly.
• §14 described Pilot as running on pilot-runner :8094 in this stack → retired in v3.5.
• The repo is public and must not name a client domain. The dead Pilot infra lines named codec.lucyvpa.com / pilot.lucyvpa.com. Genericized there and in the two historical CHANGELOG entries.
• README skills badge read 76 (the MCP-exposed subset) while FEATURES.md says 89 built-in → badge now 89. In-text "76 skills" in MCP-server context is correct and left alone.

Deliberately NOT touched: lucyvpa references that are live infrastructure — codec_ava_client proxy URL, the dashboard CORS origin, codec_mcp_http host, the license alias, PRIVACY.md. Those still resolve and belong to roadmap R5 (brand separation), not a docs PR.

Security blocklists naming the pilot skill (codec_consent, codec_voice, codec_mcp, codec_bridges, codec_agent_runner, codec_license) are also left in place on purpose: blocking a now-absent skill costs nothing and keeps it blocked if Pilot ever returns.

Verification

• 2730 passed, 78 skipped; ruff check clean

🤖 Generated with Claude Code