feat!: LogosCore is a shell over core_service, never the C API

[dlipicar]

Stacked on #169. Part of the runtime-control wave's cleanup. It deletes legacy mode, the token listener, and liblogos' deprecated lifecycle C API (load_module, unload_module, refresh_modules, the get_* queries, get_module_stats, optional_load_report, get_token, set_token_listener). Every consumer migrates to core_service through the shell binding.

logos::host::LogosCore

• shellName is required. Construction throws without one, before anything is initialised.

• start() throws when no shell binding comes back. That means liblogos has no token authority (capability_module isn't bundled or didn't run in-process), and nothing would load.

• Every lifecycle call and query goes through core_service, with no C API fallback. The ones that were C-only now map onto core_service's new read methods, added to core_service.lidl. Each answers the JSON the C function did:

  Method	core_service
  dependencies	getModuleDependencies
  dependents	getModuleDependents
  optionalDependencies	getModuleOptionalDependencies
  modulesInfoJson	getModulesInfo
  optionalLoadReportJson	getOptionalLoadReport

• Before start(), calls return false or empty; nothing is dialled.

• Removed: Config::tokenListener, token(), and the C declarations of every removed function. processModule stays on the C API: it's the embedder's alone.

Other changes

• logos::host::tokenKeys stays as a retired shim (feat(tokens): retire the token registry logos-protocol#98 retires the registry): on protocol 0.13 it answers empty with an ungranted status, and a module that still calls it (capability_module on master) keeps compiling. The cdylib generator's emitted comments no longer describe the registry carve-out.
• Tests: test_logos_host_core.cpp answers each core_service method from a stub binding. It asserts:
  • the call shapes;
  • a required shell name;
  • start() throwing without a binding;
  • nothing reaching core_service before start().
• README: the LogosCore section describes the shell-only core.
• Relock: logos-protocol moves onto feat(tokens): retire the token registry logos-protocol#98.

🤖 Generated with Claude Code

[github-actions]

📊 cpp-sdk doc-test report

The real accounts module, run through a logoscore daemon with the whole stack built against this commit of the C++ SDK — rendered alongside the commands actually run and their output (updated each run, commit 4226d31):

• ubuntu-latest report
• macos-latest report

Pages can take a minute to update after the run finishes.