stack: Telemetrie-Default nach Installationsform, Byte-Deckel und Session-Retention (schliesst #55)

Files changed:
- .gitea/workflows/ci.yml
- .gitignore
- CHANGES.md
- EVALS.md
- INSTALL-MCP.md
- INSTALL.md
- VERSION
- instructions/setup-instance.md
- reports/CONTRACT.md
- tools/CONTRACT.md
- tools/chemenu/commands/doctor.py
- tools/chemenu/config.py
- tools/chemenu/mcp/server.py
- tools/chemenu/telemetry/policy.py
- tools/chemenu/telemetry/schema.py
- tools/chemenu/telemetry/writer.py
- tools/chemenu/tests/conftest.py
- tools/chemenu/tests/test_doctor.py
- tools/chemenu/tests/test_mcp_server.py
- tools/chemenu/tests/test_telemetry_emit.py
- tools/chemenu/tests/test_telemetry_policy.py
- tools/chemenu/version.py

.gitignore

@@ -117,6 +117,14 @@ npm-debug.log*
 # means unrestricted; `doctor` reports which.
 /.wikitool-remotes.json
 
+# Telemetry opt-in/opt-out plus its two quantity caps (see EVALS.md and
+# tools/chemenu/telemetry/policy.py). Per-checkout for the same reason as the
+# allowlist above: the consent to write cleartext prompts to *this* disk
+# belongs to the checkout, not the corpus, so a second clone must not inherit
+# it. Absent means the installation-form default applies; `doctor` reports
+# which.
+/.wikitool-telemetry.json
+
 # Coverage output from `pytest --cov` (see .gitea/workflows/ci.yml). Derived,
 # like reports/: recomputable from any commit, and `publish` runs `git add -A`,
 # so an unignored htmlcov/ would commit itself on the next content publish.