feat(rules)!: retire rulebook subscriptions and per-project suppressions (#4052)

A rule's home is its scope now: a rule in a rulebook topic is global, a rule on
a project applies to that project, and retrieval reads that directly (#4074).
A subscription had stopped changing anything a session received; a suppression
muted rules from a subscription. Operator, 2026-09-15: "we have global and
project scoped rules, we don't need the subscriptions now."

What goes, whole (rule 22):
- Migration 0101 drops project_rulebook_subscriptions, project_rule_suppressions
  and project_topic_suppressions, and strips subscribe_rulebooks (and 394's
  leftover exclude_always_on_rulebooks) from stored inception choices.
- Service, MCP and REST: subscribe/unsubscribe and the four suppress/unsuppress
  operations. The Subscribers checklist, the subscribe chips, the skip buttons
  and the Suppressed section in the rules UI.
- Inception asks two questions (design system, seed Systems). create_project and
  decide_project_inception lose subscribe_rulebooks.
- Backup v15 stops exporting the three sections; older archives still restore,
  the keys simply unread. Trash no longer hard-deletes suppression rows.

What changes meaning:
- get_applicable_rules is a project's LISTING: its own rules, plus the global
  rules tagged to an area it works in. Untagged global rules apply everywhere
  and arrive by retrieval, so they are not listed. A co_surfaces partner on a
  different project is not dragged in.
- list_rules(project_id) lists that project's own rules.
- rules_payload drops subscribed_rulebooks and suppressed_*; the handshake's
  brief form is project_rules alone.
- using-scribe's "Where a new rule goes" and inception sections, tool
  docstrings and docs say global vs project. Plugin 2026.09.15.1620.

Milestone 414 step 2.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01821k5B3Ysecp9fNYs92Kuy

tests/test_routes_rulebooks.py

@@ -48,9 +48,7 @@ def test_service_signatures_require_user_id():
         "set_rule_systems", "add_rule_relation", "remove_rule_relation",
         "list_rules",
         "get_rule", "update_rule", "delete_rule",
-        "subscribe_project", "unsubscribe_project", "get_applicable_rules",
-        "suppress_rule_for_project", "unsuppress_rule_for_project",
-        "suppress_topic_for_project", "unsuppress_topic_for_project",
+        "get_applicable_rules",
     ):
         sig = inspect.signature(getattr(svc, fn_name))
         assert "user_id" in sig.parameters, f"{fn_name} missing user_id param"
@@ -70,38 +68,32 @@ def test_create_project_rule_route_exists():
     assert callable(getattr(rb_routes, "create_project_rule"))
 
 
-def test_suppression_route_handlers_exist():
-    """The 4 suppression endpoint handlers are registered as Python callables."""
-    from scribe.routes import rulebooks as rb_routes
-    for name in (
-        "suppress_project_rule", "unsuppress_project_rule",
-        "suppress_project_topic", "unsuppress_project_topic",
-    ):
-        assert callable(getattr(rb_routes, name)), f"missing route handler: {name}"
-
-
-def test_suppression_association_tables_declared():
-    """Migration 0060 created two new association tables; the models module
-    must declare matching Table() objects so the rest of the service layer
-    can reference them via .c.<column>."""
+def test_subscriptions_and_suppressions_are_gone():
+    """Milestone 414: a rule's home is its scope. Nothing subscribes a project
+    to a rulebook or mutes a rule for one — not a route, a service function or
+    a table. A partial removal would leave a door that 500s on a missing table.
+    """
     from scribe.models import rulebook as rb_models
-    for tbl_name in ("project_rule_suppressions", "project_topic_suppressions"):
-        tbl = getattr(rb_models, tbl_name, None)
-        assert tbl is not None, f"models.rulebook missing {tbl_name}"
-        cols = {c.name for c in tbl.columns}
-        assert "project_id" in cols
-        assert "rule_id" in cols or "topic_id" in cols
+    from scribe.routes import rulebooks as rb_routes
+    from scribe.services import rulebooks as svc
+    for name in ("subscribe_project", "unsubscribe_project",
+                 "suppress_project_rule", "unsuppress_project_rule",
+                 "suppress_project_topic", "unsuppress_project_topic"):
+        assert not hasattr(rb_routes, name), f"route handler still present: {name}"
+    for name in ("subscribe_project", "unsubscribe_project",
+                 "suppress_rule_for_project", "unsuppress_rule_for_project",
+                 "suppress_topic_for_project", "unsuppress_topic_for_project"):
+        assert not hasattr(svc, name), f"service function still present: {name}"
+    for name in ("project_rulebook_subscriptions", "project_rule_suppressions",
+                 "project_topic_suppressions"):
+        assert not hasattr(rb_models, name), f"table still declared: {name}"
 
 
-
-
-
-
-def test_rule_and_subscription_handlers_callable():
+def test_rule_handlers_callable():
     from scribe.routes import rulebooks as rb_routes
     for name in (
         "list_rules", "create_rule", "get_rule", "update_rule", "delete_rule",
-        "subscribe_project", "unsubscribe_project", "get_project_rules",
+        "get_project_rules",
         # The typed edges — both doors carry them (rule 33).
         "relate_rules", "unrelate_rules",
     ):