revert(design-systems): drop the rulebook import — a migration, not a feature

Operator's call, and it corrects a scope error rather than a bug:

  "this is a path for a user to go from a rulebook to a design system. we don't
   need to build this path in the app itself ... you should be the one that does
   the import ... going forward no one else should have to do such a migration."

Right. Nobody starting from a design system will ever go rulebook -> system, so
the whole path was permanent product code serving a single act on one install.
Rule #22: remove it, don't flag it off. Gone from the service, the REST route,
the MCP tool, the UI panel, the API client and its tests.

There is a second consequence I had missed, and it is the better argument. The
parser was WORSE at this than doing it by hand. `propose_tokens` leaves radius
steps and type sizes valueless because "Small 4px" is not a hex and nothing here
parses it — a limitation I documented carefully and shipped anyway. But that
limitation only exists because the importer had to run unattended. Done as work
rather than as a feature, those values are just read and written, and the result
is a complete design system instead of one with a dozen blanks and a count
explaining them.

Scaffolding built around my own absence from the loop, when I am the loop.

KEPT: `extract_expectations` and `design_expectations` in
services/design_rulebook_import.py. The live drift panel still reads them until
it is repointed at a resolved design system (#2295), and removing them now would
take the /design page's only content with it. They go with that change, not this
one.

tests/test_routes_design_systems.py

@@ -24,7 +24,7 @@ def test_route_handlers_callable():
     for name in (
         "list_design_systems", "create_design_system", "get_design_system",
         "update_design_system", "delete_design_system", "resolve_design_system",
-        "import_design_system", "get_design_system_stylesheet",
+        "get_design_system_stylesheet",
         "check_snippets_against_system",
         "list_design_tokens", "create_design_token",
         "update_design_token", "delete_design_token", "set_project_design_system",
@@ -46,7 +46,6 @@ def test_every_endpoint_is_reachable_on_the_app():
         "/api/design-systems",
         "/api/design-systems/<int:design_system_id>",
         "/api/design-systems/<int:design_system_id>/resolved",
-        "/api/design-systems/<int:design_system_id>/import",
         "/api/design-systems/<int:design_system_id>/stylesheet",
         "/api/design-systems/<int:design_system_id>/snippet-check",
         "/api/design-systems/<int:design_system_id>/tokens",
@@ -62,7 +61,7 @@ def test_service_functions_take_user_id():
         "create_design_system", "list_design_systems", "get_design_system",
         "update_design_system", "delete_design_system", "resolve_design_system",
         "create_token", "list_tokens", "update_token", "delete_token",
-        "set_project_design_system", "import_from_rulebook",
+        "set_project_design_system",
         "stylesheet_for_system", "check_snippets_against_system",
     ):
         fn = getattr(svc, fn_name)
@@ -91,11 +90,9 @@ def test_agent_and_web_surfaces_stay_at_parity():
         assert callable(getattr(tools, name)), f"MCP tool missing: {name}"
         assert callable(getattr(routes, name)), f"REST route missing: {name}"
 
-    # Import is the one verb whose handler names differ between the surfaces
-    # (the tool says what it reads FROM; the route is already under the system),
-    # so the loop above can't pair it. It still has to exist on both.
-    assert callable(tools.import_design_system_from_rulebook)
-    assert callable(routes.import_design_system)
+    # The snippet check is the one verb whose handler names differ between the
+    # surfaces (the tool says what it checks AGAINST; the route is already under
+    # the system), so the loop above can't pair it. It still has to exist on both.
     assert callable(tools.check_snippets_against_design_system)
     assert callable(routes.check_snippets_against_system)