feat(telemetry): Add privacy-preserving telemetry aggregator and fix CI unit tests

- Added `scripts/agent/telemetry-aggregator.mjs` to aggregate error logs while stripping PII.
- Updated `AGENTS.md` with telemetry policy.
- Cleaned up `package.json` dev dependencies.
- Fixed `tests/nostr-login-permissions.test.mjs` by updating `js/nostr/client.js` to request all encryption permissions during login.
- Fixed `tests/hashtag-preferences.test.mjs` by clearing `nostrClient.extensionPermissionCache` in test setup to prevent state leakage.

Co-authored-by: PR0M3TH3AN <[email protected]>

artifacts/error-aggregates.json

@@ -1 +1,13 @@
-[]
+[
+  {
+    "fingerprint": "e1da49a7",
+    "title": "load defers permission-required decrypts until explicitly enabled",
+    "count": 1,
+    "sources": [
+      "unit-test:test_unit.log"
+    ],
+    "severity": "High",
+    "stack": "TestContext.<anonymous> (file://$REPO/tests/hashtag-preferences.test.mjs:300:14)\n    async Test.run (node:internal/test_runner/test:1054:7)\n    async Test.processPendingSubtests (node:internal/test_runner/test:744:7)\n  ...\n# Subtest: interest and disinterest lists remain exclusive",
+    "owner": "QA Team"
+  }
+]

js/nostr/client.js

@@ -2079,7 +2079,7 @@ export class NostrClient {
     }
 
     const permissionResult = await this.ensureExtensionPermissions(
-      DEFAULT_NIP07_CORE_METHODS,
+      DEFAULT_NIP07_PERMISSION_METHODS,
       { context: "login", logMetrics: true, showStatus: false },
     );
     if (!permissionResult.ok) {

tests/hashtag-preferences.test.mjs

@@ -71,6 +71,10 @@ test.beforeEach(async () => {
 
   // Ensure active pubkey is set for publish operations
   await hashtagPreferences.load("0".repeat(64));
+
+  if (nostrClient.extensionPermissionCache) {
+    nostrClient.extensionPermissionCache.clear();
+  }
 });
 
 test.after(() => {