feat(runtime)!: remove legacy dlp-profiles command (use 'runtime dlp profiles' instead)

[cdot65]

Summary

Removes the legacy airs runtime dlp-profiles list (Management API) command. The new airs runtime dlp profiles list (DLP namespace) shipped in v2.9 is now the canonical DLP profile listing.

Breaking change — marked with ! in the conventional-commit title. Minor bump queued via changeset (per project policy: the new namespace command is a fully shipped equivalent, the legacy path is removed but its replacement has been GA since v2.9).

Closes the removal half of the work tracked in #226 (the override was applied by maintainer in the issue's closing comment).

What changed

• Command removed: airs runtime dlp-profiles list (no more dlp-profiles subcommand on runtime).
• Backing removed: SdkManagementService.listDlpProfiles, DlpProfileInfo type, ManagementService interface entry, renderDlpProfileList renderer.
• Cross-reference fixed: runtime dlp group description no longer points users at the removed command.
• Docs regenerated: docs/cli/runtime/dlp-profiles.md removed, docs/cli/index.md + SUMMARY.md refreshed. Typedoc-generated docs/developers/api/** updated for line-shift + dropped method.

Migration call-out (per maintainer's required addition)

docs/about/release-notes.md now ships an explicit Migration note covering the legacy-only/new-only profile name differences observed across the two endpoints on the same tenant:

• Legacy-only on this tenant: PII Basic Block All Data — acceptable loss (Management artifact).
• New-only on this tenant: Malware — bonus.
• New endpoint is paginated — pass --page / --size past the first page.
• Field-shape change: legacy returned [{id,name}] with empty IDs; new returns {items:[{id,name,type,profile_type,status,version}], page:{...}}.

TDD

RED first — added tests/unit/cli/runtime-commands.spec.ts asserting:

• runtime has no dlp-profiles subcommand
• runtime still has a dlp group with a profiles subcommand

Then migrated:

• tests/unit/scripts/render.spec.ts — dropped the dlp-profiles fixture + assertion, added negative assertion that no runtime/dlp-profiles entry is emitted
• tests/unit/airs/management.spec.ts — dropped listDlpProfiles describe + mock

Test plan

• pnpm lint — passes (only pre-existing non-error warnings)
• pnpm tsc --noEmit — passes
• pnpm test — 707/707 passing
• pnpm docs:check — passes (123 commands, 30 on allowlist)
• pnpm docs:build — passes (mkdocs --strict)
• Smoke: pnpm dev runtime dlp-profiles list → error: unknown command 'dlp-profiles'
• Smoke: pnpm dev runtime dlp profiles list --output json → returns paginated DLP profiles against live tenant

Release

.changeset/runtime-remove-legacy-dlp-profiles.md queued (minor). No version bump or release cut in this PR.

Out of scope

• --dlp-profiles <list> flag on profile create/update (unrelated feature) — untouched.
• Non-auto-gen docs referencing the removed command — handled in companion docs handoff.