chore: remove diagnostic endpoint + debug probe scaffolding

restores api + cli to clean state after isolating the v0.4.0
phase 2 deploy issue (web app needed an explicit coolify deploy
trigger — it does not auto-deploy from gitea-vps push the way the
broker does).

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

apps/cli/src/services/api/with-rest-key.ts

@@ -45,23 +45,6 @@ export async function withRestKey<T>(
     if (!result || !result.secret) {
       throw new Error("apikey mint failed — broker did not return a secret");
     }
-    if (process.env.CLAUDEMESH_DEBUG_PROBE) {
-      const probeUrls = [
-        "https://claudemesh.com/api/v1/me/workspace",
-        "https://claudemesh.com/api/v1/me/ping",
-        "https://claudemesh.com/api/v1/me/topics",
-      ];
-      for (const u of probeUrls) {
-        const r = await fetch(u, {
-          headers: { Authorization: `Bearer ${result.secret}` },
-        });
-        const t = await r.text();
-        console.error(
-          `[probe] ${u} → ${r.status} ${r.headers.get("content-type")} (${t.slice(0, 200).replace(/\n/g, " ")})`,
-        );
-      }
-      process.exit(0);
-    }
     try {
       return await fn({
         secret: result.secret,

packages/api/src/modules/mesh/v1-router.ts

@@ -496,13 +496,6 @@ export const v1Router = new Hono<Env>()
     });
   })
 
-  // GET /v1/diagnostics-fresh-2026-05-03 — fresh path probe.
-  .get("/diagnostics-fresh-2026-05-03", async (c) => {
-    const key = c.var.apiKey;
-    requireCapability(key, "read");
-    return c.json({ ok: true, ts: Date.now() });
-  })
-
   // GET /v1/me/topics — cross-mesh topic list for the caller's user.
   //
   // For each topic across every mesh the user belongs to, returns