Remove pre-1.0 audit and protected request scaffolding

platform/api/source_rcon_handlers.go

@@ -6,7 +6,7 @@ import (
 	"browser.local/platform/dto"
 )
 
-// sourceRCONCommands is kept as legacy service plumbing but is not registered as a browser product route.
+// sourceRCONCommands dispatches a one-time SCUM Source RCON command through Run.
 func (h *coreHandlers) sourceRCONCommands(w http.ResponseWriter, r *http.Request) {
 	if r.Method != http.MethodPost {
 		writeMethodNotAllowed(w, http.MethodPost)