settings: the four per-feature files .wikitool-remotes/-telemetry/-upload/-tasks.json move into the three tiers and disappear; new command config migrate; 10.0.0-beta.1 (#208)

Files changed:
- .gitignore
- AGENTS.md
- CHANGES.md
- INSTALL.md
- VERSION
- docs/explanation/knowledge-and-commitment.md
- docs/explanation/telemetry-and-evaluation.md
- docs/explanation/why-gates-are-code.md
- docs/how-to/run-the-weekly-review.md
- docs/how-to/set-up-the-mcp-server.md
- docs/how-to/trace-and-score-sessions.md
- docs/how-to/troubleshoot.md
- docs/reference/commands/README.md
- docs/reference/commands/configuration.md
- docs/reference/commands/finding-and-checking.md
- docs/reference/commands/git.md
- docs/reference/commands/instance-health.md
- docs/reference/commands/pages.md
- docs/reference/commands/raw-material-and-uploads.md
- docs/reference/configuration.md
- docs/reference/exit-codes.md
- instructions/dev/doc-pull-through.md
- instructions/dev/tracker-testing.md
- instructions/gates.md
- instructions/ingest-queue.md
- instructions/mcp-read-server.md
- instructions/migrate-corpus.md
- instructions/migrations/10.0.0-settings-tiers.md
- instructions/setup-instance.md
- raw/CONTRACT.md
- reports/CONTRACT.md
- tools/CONTRACT.md
- tools/README.md
- tools/bugreport.py
- tools/chemenu/cli_contract.py
- tools/chemenu/commands/_util.py
- tools/chemenu/commands/config_cmd.py
- tools/chemenu/commands/docs_verify.py
- tools/chemenu/commands/doctor.py
- tools/chemenu/commands/export_cmd.py
- tools/chemenu/commands/git_publish.py
- tools/chemenu/commands/new_page.py
- tools/chemenu/commands/review_cmd.py
- tools/chemenu/commands/task_cmd.py
- tools/chemenu/commands/upload_cmd.py
- tools/chemenu/config.py
- tools/chemenu/config_shapes.py
- tools/chemenu/legacy_settings.py
- tools/chemenu/mcp/__main__.py
- tools/chemenu/mcp/server.py
- tools/chemenu/reference_doc.py
- tools/chemenu/review.py
- tools/chemenu/settings.py
- tools/chemenu/tasks/__init__.py
- tools/chemenu/tasks/caldav.py
- tools/chemenu/tasks/config.py
- tools/chemenu/tasks/superproductivity.py
- tools/chemenu/telemetry/policy.py
- tools/chemenu/tests/conftest.py
- tools/chemenu/tests/record_sp_fixtures.py
- tools/chemenu/tests/test_bugreport.py
- tools/chemenu/tests/test_caldav.py
- tools/chemenu/tests/test_config_shapes.py
- tools/chemenu/tests/test_doctor.py
- tools/chemenu/tests/test_git_publish.py
- tools/chemenu/tests/test_legacy_settings.py
- tools/chemenu/tests/test_mcp_server.py
- tools/chemenu/tests/test_new_page.py
- tools/chemenu/tests/test_review.py
- tools/chemenu/tests/test_settings.py
- tools/chemenu/tests/test_sp_recorded.py
- tools/chemenu/tests/test_superproductivity.py
- tools/chemenu/tests/test_task_cmd.py
- tools/chemenu/tests/test_tasks_config.py
- tools/chemenu/tests/test_telemetry_policy.py
- tools/chemenu/tests/test_tracker_live.py
- tools/chemenu/tests/test_upload.py
- tools/chemenu/tests/tracker_live.py
- tools/chemenu/upload.py

Co-Authored-By: Claude Code <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01SnAJ7Z3CpVD3PRbN73QtU2

.gitignore

@@ -115,35 +115,14 @@ npm-debug.log*
 # `dist export`; this anchored pattern deliberately does not match it.
 /ENVIRONMENT.md
 
-# Publish-Remote Gate allowlist (see instructions/gates.md). Names the push
-# URLs *this* checkout may publish to, so it is per-checkout for exactly the
-# reason ENVIRONMENT.md above is: a committed copy would tell a private clone
-# that the public upstream is a legitimate target for its own content. Absent
-# means unrestricted; `doctor` reports which.
+# The four per-feature settings files of earlier versions (publish-remote allowlist,
+# telemetry, MCP `submit` limits, task tracker). Nothing reads them any more -
+# `wikitool config migrate` moves them into the tiered settings below - but
+# until it has run they may still hold a credential, so a leftover stays out of
+# `publish`'s `git add -A`.
 /.wikitool-remotes.json
-
-# Telemetry opt-in/opt-out plus its two quantity caps (see docs/explanation/
-# telemetry-and-evaluation.md and tools/chemenu/telemetry/policy.py). Per-checkout for the same reason as the
-# allowlist above: the consent to write cleartext prompts to *this* disk
-# belongs to the checkout, not the corpus, so a second clone must not inherit
-# it. Absent means the installation-form default applies; `doctor` reports
-# which.
 /.wikitool-telemetry.json
-
-# MCP `submit` tool opt-in (identity header name, size deckel, extension
-# allowlist, per-submitter quota - see raw/CONTRACT.md "Getting a file in
-# from outside" and tools/chemenu/upload.py). Per-checkout for the same
-# reason as the two files above. Absent means the tool is not registered at
-# all - not "unrestricted" - the stronger of the two postures this file
-# co-locates with.
 /.wikitool-upload.json
-
-# Task-tracker provider opt-in (Gitea #124, AGENTS.md's task/project routing) -
-# which provider the GTD weekly review talks to, its connection details, and
-# the review's three staleness thresholds. Per-checkout for the same reason as
-# the three files above: the provider and its credentials belong to one
-# checkout's own tracker, not to the corpus. Absent means no tracker is
-# configured; `doctor` reports which.
 /.wikitool-tasks.json
 
 # Tool paths recorded by the preflight (tools/preflight.sh / .ps1, see
@@ -161,8 +140,8 @@ npm-debug.log*
 
 # Live-suite tracker profiles (Gitea #156): one file per tracker of the user's own that the
 # live suite may be pointed at (`CHEMENU_LIVE_PROFILE=<name>`,
-# instructions/dev/tracker-testing.md). They carry the same credentials as the file above
-# and are per-checkout for the same reason. A directory pattern, anchored: nothing in it is
+# instructions/dev/tracker-testing.md). They hold references to credentials, never the
+# values, and are per-checkout for the same reason as `.wikitool-local.json`. A directory pattern, anchored: nothing in it is
 # ever tracked, so no negation has to rescue anything.
 /.wikitool-tasks.d/