refactor(auth): delegate access control to be-system

Remove Agent Desk users, roles, login sessions, tokens, and local permission persistence. Expose the backend as an embeddable ai-agent module with host-provided subject lookup and operation authorization callbacks, and complete the frontend/backend repository split.

internal/ai/tooling/executor.go

@@ -6,8 +6,8 @@ import (
 	"strings"
 	"time"
 
-	"agent-desk/internal/ai/mcps"
-	"agent-desk/internal/pkg/toolx"
+	"code.tczkiot.com/wlw/ai-agent/internal/ai/mcps"
+	"code.tczkiot.com/wlw/ai-agent/internal/pkg/toolx"
 )
 
 // MCPExecutor is the single execution boundary for dynamically discovered

internal/ai/tooling/registry.go

@@ -6,8 +6,8 @@ import (
 	"fmt"
 	"strings"
 
-	"agent-desk/internal/pkg/enums"
-	"agent-desk/internal/pkg/toolx"
+	"code.tczkiot.com/wlw/ai-agent/internal/pkg/enums"
+	"code.tczkiot.com/wlw/ai-agent/internal/pkg/toolx"
 )
 
 const (

internal/ai/tooling/registry_test.go

@@ -4,7 +4,7 @@ import (
 	"strings"
 	"testing"
 
-	"agent-desk/internal/pkg/toolx"
+	"code.tczkiot.com/wlw/ai-agent/internal/pkg/toolx"
 )
 
 func TestRegistryResolvesRegisteredToolPolicy(t *testing.T) {