refactor(auth): delegate access control to be-system

Remove Agent Desk users, roles, login sessions, tokens, and local permission persistence. Expose the backend as an embeddable ai-agent module with host-provided subject lookup and operation authorization callbacks, and complete the frontend/backend repository split.

internal/ai/mcps/client.go

@@ -6,8 +6,8 @@ import (
 	"strings"
 	"time"
 
-	"agent-desk/internal/pkg/errorsx"
-	"agent-desk/internal/pkg/i18nx"
+	"code.tczkiot.com/wlw/ai-agent/internal/pkg/errorsx"
+	"code.tczkiot.com/wlw/ai-agent/internal/pkg/i18nx"
 
 	"github.com/modelcontextprotocol/go-sdk/mcp"
 )

internal/ai/mcps/providers/system_tools_provider.go

@@ -1,7 +1,7 @@
 package providers
 
 import (
-	"agent-desk/internal/pkg/config"
+	"code.tczkiot.com/wlw/ai-agent/internal/pkg/config"
 	"context"
 	"time"
 

internal/ai/mcps/registry.go

@@ -1,7 +1,7 @@
 package mcps
 
 import (
-	"agent-desk/internal/ai/mcps/providers"
+	"code.tczkiot.com/wlw/ai-agent/internal/ai/mcps/providers"
 
 	"github.com/modelcontextprotocol/go-sdk/mcp"
 )

internal/ai/mcps/runtime.go

@@ -4,8 +4,8 @@ import (
 	"context"
 	"strings"
 
-	"agent-desk/internal/pkg/config"
-	"agent-desk/internal/pkg/errorsx"
+	"code.tczkiot.com/wlw/ai-agent/internal/pkg/config"
+	"code.tczkiot.com/wlw/ai-agent/internal/pkg/errorsx"
 )
 
 type RuntimeService struct {