chore(vocero): remove the legacy ApiPilot integration (#3)

Vocero now retrieves AquaPortal content through authenticated MCP. This removes the obsolete ApiPilot integration from the API and browser while preserving the separately deployed speech pipeline.

Release notes:

- Removed ApiPilot endpoints, configuration, credential overrides, and HTTP/realtime tool execution.
- Removed browser ApiPilot catalog loading and prompt generation while retaining authenticated MCP discovery.
- Updated regression coverage and operating documentation for the retired routes and settings.

Reviewed-on: AquaPortal/s2s#3

vocero-api/vocero_api/realtime/events.py

@@ -6,7 +6,6 @@ from typing import Any, cast
 
 from vocero_api.core import logging as app_logging
 from vocero_api.services import context as services_context
-from vocero_api.services import tool_context as services_tool_context
 
 
 async def _report_server_debug(hypothesis_id: str, location: str, msg: str, data: dict | None = None) -> None:
@@ -324,10 +323,6 @@ def _sanitize_realtime_event_raw(raw_message: str, session_ctx: dict[str, Any] |
         nonlocal changed
         if isinstance(v, str) and v.strip():
             cleaned = _sanitize_agent_output(v, session_ctx)
-            # Layer 8 removes internal ApiPilot CALL markers before UI/TTS.
-            # The pass-2 accumulator retains the original transcript so
-            # execution can still be triggered by its marker.
-            cleaned = services_tool_context._sanitize_text_strip_apipilot_markers(cleaned)
             if cleaned != v:
                 changed = True
                 return cleaned