core: remove obsolete IBD backup watcher

[BenWestgate]

Closes #265.

ibd-progress duplicates Bitcoin Core's own synchronization UI, recursively scrapes debug.log, and still carries the mandatory backup/wallet flow removed from CipherStick's supported wallet path. #265 explicitly allows removing the watcher when no extra completion notification is needed, so this takes the lower-maintenance path instead of adding another polling daemon.

Changes:

• remove bails/.local/bin/ibd-progress entirely;
• remove its obsolete ShellCheck exclusion;
• during install/update cleanup, stop running CipherStick-owned legacy ibd-progress / wallet-watch process trees and remove their obsolete executables, autostart files, and ibd_backedup marker;
• match the exact legacy script path in /proc/<pid>/cmdline before terminating anything;
• leave Persistent Storage user data untouched.

Local checks:

• git diff --check
• bash -n b
• live cleanup smoke test launched a temporary legacy watcher with a child process, verified both were terminated, verified the managed legacy files/state were removed, and verified unrelated user data remained.

Human/Tails gate still required: exercise upgrade/restart behavior on the supported Tails release and confirm no obsolete watcher or backup wizard returns.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 52830af6e5

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[BenWestgate]

AI-generated review, posted at the maintainer's request.

ACK a6fb90b code. Legacy wallet-watch is now removed and process matching is scoped to the exact managed script paths; supported-Tails upgrade validation remains the merge gate.

[BenWestgate]

Codex current-head review at 633f61c: no findings. The updater removes only the named legacy wallet/Sparrow/watcher artifacts, terminates matching per-user obsolete watcher process trees, preserves Bitcoin Core wallet data, and the replacement codex32 checkout is pinned and re-verified by exact commit plus clean-tree checks before execution.

[BenWestgate]

AI-assisted current-head security verification for issue #265 at 633f61c: the audited recursive-process finding is closed by construction. bails/.local/bin/ibd-progress is deleted, its autostart/state is removed during install/update cleanup, and the cleanup targets only processes whose /proc/<pid>/cmdline contains the exact legacy watcher path before recursively stopping that legacy process tree. No replacement recursive watcher is introduced. Exact-head Lint CI is green and there are no unresolved review threads. This is a verification of the #265 finding, not an overall ACK of the much larger legacy-wallet/removal stack carried by this PR; supported-Tails upgrade/restart qualification in the PR body remains required.