refactor(frontend): remove console ai features

[malinskibeniamin]

Summary

Remove Console's dedicated AI frontend surface: legacy AI Agents, Knowledge Bases, Remote MCP, Transcripts, and AIGW integrations.

• removes routes, pages, clients, state, assets, E2E coverage, and AI-only dependencies
• removes the Agentic sidebar section and related header/footer behavior
• removes public federation inputs and flags for AIGW and the Agentic Data Plane
• leaves former AI URLs unregistered so they use the standard 404 flow
• removes stale AI-only lint, test, and Snyk configuration
• removes roughly 52,000 lines

Preserved scope

Intentionally unchanged:

• generated frontend contracts under frontend/src/protogen
• backend and shared protobuf contracts
• Redpanda Connect, including AI-capable processors, schemas, templates, and branding
• Secret Store behavior and its existing AI-related scope taxonomy
• developer AI tooling and workflows, including .mcp.json, .claude, and the Claude workflow test

Surface review

Surface	Before	After
Sidebar	Agentic section exposed AI Agents, Knowledge Bases, Remote MCP, and Transcripts	Agentic section and items removed
Former AI URLs	Dedicated Console pages	Standard 404
Not-found actions	Click-only "Go back" text	Accessible back button plus a home fallback
Federation config	Accepted AIGW URL, ADP mode, and AI feature flags	Inputs removed

Screenshot skipped because no browser was connected for local inspection. Visual recap skipped because the product change is removal-only.

Release coordination

• Cloud UI and other federation hosts must stop passing aigwUrl and isAdpEnabled before consuming the updated SetConfigArguments type. Inline typed objects otherwise get excess-property errors.
• Extra runtime properties are ignored during a staggered rollout, so an older host does not crash this Console build.
• Removed feature-flag keys should be retired in hosts alongside this change.

Testing

• bun install --frozen-lockfile --ignore-scripts
• bun run lint (completed; reports the repository's existing 903 non-fixable lint findings)
• bun run type:check
• bun run build
• bun run test:unit — 49 files, 751 tests passed
• focused secret-scope unit tests — 5 passed
• targeted integration tests — 15 tests passed
• full integration suite — 1,216 passed; one unrelated Observability test timed out under full-suite load
• isolated Observability rerun — 3 tests passed

Automated review

Claude Opus found no P0/P1 issues. Its actionable code and configuration findings were addressed in ce7b0b3ff.

Review guidance

• verify host integrations no longer pass the intentionally removed federation inputs
• verify generated contracts, Redpanda Connect, and Secret Store remain untouched functionally
• verify old AI URLs resolve through the normal not-found experience

[github-actions]

⚠️ Design-token findings

App: frontend · Scope: diff vs origin/master · Files: 35

	Count
⚠️ Outdated registry components	0
🛠 Locally-modified components	0
❓ Unknown to registry	0
🎨 Off-token palette colours	0
🔢 Ad-hoc utility classes	1

🔢 Ad-hoc utility classes (arbitrary values)

These bypass the design tokens. Prefer a named scale entry or add a new token.

Class	Category	Uses	Files
fill-[#252F3E]	🎨 color	1	1

Generated by lookout audit-changes.

[malinskibeniamin]

Review fixes pushed in ce7b0b3ff.

• restored the preserved Secret Store scope taxonomy and added numeric-contract tests
• replaced the tautological nav assertion with real-router 404/no-redirect coverage
• made not-found actions keyboard-accessible with a native home-link fallback
• removed stale Biome, react-doctor, Vitest, Snyk, and JSON-schema references
• added the changelog and host/federation release-coordination notes

Validation: type-check, lint, build, 5 focused unit tests, and 10 focused integration tests pass. Final Claude Opus re-review: APPROVED (no actionable P0-P2 findings). All PR checks pass, including Enterprise CI.

[malinskibeniamin]

Removed frontend/src/removed-ai-routes.test.tsx in aa36641b3. It mutated the generated route tree and injected the not-found component, so it did not validate production routing.