refactor(identity-webhook): remove legacy-env, ship 0.4.0

[eliteprox]

Summary

• Remove ./legacy-env (and tests); consumers use createEndUserVerifierFromEnv + createBalanceGate.
• Package version 0.4.0 with exports: ./protocol, ./verifiers, ./balance-gate.
• Point repository / release docs at pymthouse/clearinghouse (renamed from clearinghouse-runtime).
• E2E authorize tests for composite exchange + balance gate 483 / expiry capping.

This tip is what pymthouse should depend on after publish (@pymthouse/clearinghouse-identity-webhook@^0.4.0), fixing the finding that published 0.3.3 lacked ./balance-gate.

Test plan

• cd identity-webhook && npm test
• After merge: tag v0.4.0, confirm npm trusted publisher is set for pymthouse/clearinghouse + release.yml
• Bump pymthouse app dep to ^0.4.0

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 10f14c3f-c55e-41b6-81d5-9fed47cb1977

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch refactor/remove-legacy-env

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud