refactor(auth): delegate access control to be-system

Remove Agent Desk users, roles, login sessions, tokens, and local permission persistence. Expose the backend as an embeddable ai-agent module with host-provided subject lookup and operation authorization callbacks, and complete the frontend/backend repository split.

internal/ai/workflow/dsl/types_test.go

@@ -5,7 +5,7 @@ import (
 	"strings"
 	"testing"
 
-	"agent-desk/internal/ai/workflow/dsl"
+	"code.tczkiot.com/wlw/ai-agent/internal/ai/workflow/dsl"
 )
 
 func TestDefinitionUnmarshalsFlowGramStyleSchema(t *testing.T) {

internal/ai/workflow/registry/registry.go

@@ -1,6 +1,6 @@
 package registry
 
-import "agent-desk/internal/ai/workflow/dsl"
+import "code.tczkiot.com/wlw/ai-agent/internal/ai/workflow/dsl"
 
 const (
 	NodeTypeStart                     = "start"

internal/ai/workflow/registry/spec.go

@@ -1,6 +1,6 @@
 package registry
 
-import "agent-desk/internal/ai/workflow/dsl"
+import "code.tczkiot.com/wlw/ai-agent/internal/ai/workflow/dsl"
 
 type NodeRiskLevel string
 

internal/ai/workflow/validator/validator.go

@@ -5,8 +5,8 @@ import (
 	"fmt"
 	"strings"
 
-	"agent-desk/internal/ai/workflow/dsl"
-	"agent-desk/internal/ai/workflow/registry"
+	"code.tczkiot.com/wlw/ai-agent/internal/ai/workflow/dsl"
+	"code.tczkiot.com/wlw/ai-agent/internal/ai/workflow/registry"
 )
 
 type Error struct {

internal/ai/workflow/validator/validator_test.go

@@ -5,9 +5,9 @@ import (
 	"strings"
 	"testing"
 
-	"agent-desk/internal/ai/workflow/dsl"
-	"agent-desk/internal/ai/workflow/registry"
-	"agent-desk/internal/ai/workflow/validator"
+	"code.tczkiot.com/wlw/ai-agent/internal/ai/workflow/dsl"
+	"code.tczkiot.com/wlw/ai-agent/internal/ai/workflow/registry"
+	"code.tczkiot.com/wlw/ai-agent/internal/ai/workflow/validator"
 )
 
 func TestValidateDefinitionAcceptsMinimalFlowGramStyleFlow(t *testing.T) {