refactor(security): excise Telegram from owner identity + marketplace appeals (Phase 5 step 6b)

Telegram did nothing real for auth — no bot, no token, no send. Owner is identified by
Apple ID; the Telegram-ID branch in userType() compared against "7161847911", which an
Apple Sign-In id never equals (unreachable on device). Removed:
- ownerTelegramID (AgentAccessControl + Secrets/Secrets.example)
- the Telegram branch in userType() — owner now via the Apple-ID branch only
- the dead Scenario3 telegramApproval factor (Scenario3 never invoked; initiate/verify
  have zero callers across all repos)
- the "telegram:@dardan" marketplace appeal channel (appeals store locally, never sent) -> "owner-review"

Adversarial-verified behavior-preserving (3 lenses, no holes): every userType() call site
passes appState.currentUserID, sourced only from Apple's opaque credential.user (=== the
stored com.mtrx.appleUserId the surviving branch compares), never a Telegram id. Owner still
classifies as owner, non-owners as consumer — unchanged. Server core already migrated to OTP.
This class is UX-only routing (server makes the binding owner call). Full 117-suite green.

Author: Neo

Blockchain/Components/Component24_Marketplace/MarketplaceManager.swift

@@ -1,7 +1,7 @@
 // MarketplaceManager.swift
 // MTRX Blockchain - Components - Marketplace (C24)
 //
-// 5% NeoSafe / 95% seller, compliance filter, appeal to Dardan via Telegram.
+// 5% NeoSafe / 95% seller, compliance filter, appeal escalated to the platform owner.
 
 import Foundation
 import Combine
@@ -62,8 +62,8 @@ struct MarketAppeal: Identifiable, Codable {
     let reason: String
     var status: AppealStatus
     let filedAt: Date
-    /// Appeals are directed to Dardan via Telegram.
-    let escalationChannel: String  // "telegram:@dardan"
+    /// Appeals are escalated to the platform owner for review.
+    let escalationChannel: String  // e.g. "owner-review"
 }
 
 enum AppealStatus: String, Codable {
@@ -102,8 +102,8 @@ final class MarketplaceManager: ObservableObject {
     static let platformFeePercent: Double = 0.05
     static let sellerSharePercent: Double = 0.95
 
-    /// Appeals go to Dardan via Telegram.
-    static let appealChannel = "telegram:@dardan"
+    /// Appeals are escalated to the platform owner for review (stored locally; no channel wired yet).
+    static let appealChannel = "owner-review"
 
     weak var delegate: MarketplaceDelegate?
 
@@ -261,7 +261,7 @@ final class MarketplaceManager: ObservableObject {
         await updateListingInPublished(listing)
     }
 
-    // MARK: - Appeals (to Dardan via Telegram)
+    // MARK: - Appeals (escalated to the platform owner)
 
     func fileAppeal(listingId: String, appellantAddress: String, reason: String) async throws -> MarketAppeal {
         guard listingStore[listingId] != nil else {

Config/Secrets.example.swift

@@ -7,9 +7,6 @@
 import Foundation
 
 enum AppSecrets {
-    /// Owner Telegram ID — only account with Neo access
-    static let ownerTelegramID: Int64 = 0
-
     /// NeoSafe wallet address
     static let neoSafeAddress: String = ""
 }

Core/Security/AgentAccessControl.swift

@@ -17,7 +17,7 @@ import Combine
 /// Two user types:
 /// - Consumer: Trinity primary, Morpheus at pivotal moments, Neo invisible
 /// - Owner (Dardan): Neo primary, enhanced Trinity + Morpheus available
-///   (owner identity is being moved from Telegram to Apple ID + Twilio OTP — Phase 2)
+///   (owner identity is the Apple ID that created this install; OTP verification — Phase 2)
 ///
 /// Three scenarios for unauthorized Neo access (the *server* makes the binding call):
 /// - Scenario 1 (Unintentional): Trinity intercepts silently
@@ -27,12 +27,6 @@ import Combine
 final class AgentAccessControl: ObservableObject {
     static let shared = AgentAccessControl()
 
-    // MARK: - Owner identity
-
-    /// The owner's Telegram ID — only account with Neo access.
-    /// Value sourced from AppSecrets (Config/Secrets.swift, gitignored).
-    static let ownerTelegramID: Int64 = AppSecrets.ownerTelegramID
-
     // MARK: - Published state
 
     @Published private(set) var currentAgent: ActiveAgent = .trinity
@@ -60,10 +54,6 @@ final class AgentAccessControl: ObservableObject {
     }
 
     func userType(for userID: String) -> UserType {
-        // Owner check — only Dardan's account
-        if userID == String(Self.ownerTelegramID) {
-            return .owner
-        }
         // The Apple account that signed in and created this install's
         // demo wallet IS the platform owner on this device.
         if !userID.isEmpty,
@@ -179,13 +169,12 @@ final class AgentAccessControl: ObservableObject {
     // MARK: - Scenario 3: Legitimate need
 
     struct Scenario3State {
-        var telegramApproved = false
         var onChainVerified = false
         var approvalCode: String?
         var generatedCode: String?
 
         var isFullyAuthorized: Bool {
-            telegramApproved && onChainVerified && approvalCode == generatedCode && generatedCode != nil
+            onChainVerified && approvalCode == generatedCode && generatedCode != nil
         }
     }
 
@@ -202,8 +191,6 @@ final class AgentAccessControl: ObservableObject {
         guard var state = scenario3States[userID] else { return false }
 
         switch step {
-        case .telegramApproval:
-            state.telegramApproved = true
         case .onChainVerification:
             state.onChainVerified = true
         case .approvalCode:
@@ -327,7 +314,6 @@ enum AccessScenario {
 }
 
 enum Scenario3Step {
-    case telegramApproval
     case onChainVerification
     case approvalCode
 }