chore(worker): remove dead GitHub-App sink after ingest-API cutover (013)

The hot path POSTs to the dahaejo ingest API (Phase 4), so the GitHub-App
issue-creation code is dead: delete github-app.ts + routes.ts and their
tests, drop GH_APP_ID/GH_APP_PRIVATE_KEY/PRODUCT_ROUTES from env + wrangler
vars, refresh the pipeline docstring. Also fix the pre-existing schema.test
drift (curate-ai/prompt-ops removed from the products SSOT). tsc clean, 38
tests green.

Author: gracefullight

worker/src/env.ts

@@ -8,15 +8,10 @@ export interface Env {
   // dahaejo platform ingest endpoint (design 013 Phase 4). Sink for contact
   // inquiries — the API owns the authoritative row + best-effort GitHub issue.
   INGEST_API_URL: string;
-  // GitHub App vars retained only for the dead-letter ops-alert email context
-  // and legacy typing; the hot path no longer creates issues here.
-  GH_APP_ID: string;
-  PRODUCT_ROUTES: string;
 
   // secrets
   // Dedicated secret for the API's X-Internal-Secret gate (design 013 Phase 4).
   SUPPORT_INGEST_SECRET: string;
-  GH_APP_PRIVATE_KEY: string;
   RESEND_API_KEY: string;
   TURNSTILE_SECRET_KEY?: string;
 

worker/src/github-app.ts

@@ -9,13 +9,12 @@
  *   5. Honeypot drop
  *   6. Turnstile verification
  *   7. Rate-limit check
- *   8. PRODUCT_ROUTES parse
- *   9. Route resolution
- *  10. GitHub Issue creation (3 attempts, exp backoff) + KV dead-letter fallback
+ *   8. POST to the dahaejo ingest API (3 attempts, exp backoff) + KV
+ *      dead-letter fallback (design 013 Phase 4 — the API owns the
+ *      authoritative row + best-effort GitHub issue; this Worker only does
+ *      edge defense + the retry net).
  *
  * PII policy (D9): logs contain ONLY sha256-12 of email and message length.
- * Issue body sanitisation (D8): user message wrapped in ```text fence;
- *   backtick sequences escaped with ZWSP.
  */
 
 import type { Env } from "./env";