docs: update README for self-serve setup

[tumberger]

Summary

• Present kontext setup as the primary self-serve path.
• Frame self-serve around agent activity, hooks, and the daemon.
• Remove outdated kontext start / managed-session framing from the first-read flow.

Verification

• Not run; README-only change.

[tumberger]

• docs: update README for self-serve setup #316 👈 (View in Graphite)
• main

This stack of pull requests is managed by Graphite. Learn more about stacking.

[greptile-apps]

Greptile Summary

This PR updates the README to make self-serve setup the main onboarding path. The main changes are:

• Presents kontext setup as the primary Mac workspace connection flow.
• Reframes the runtime path around agent hooks, the daemon, and hosted streaming.
• Replaces local-session and managed-session language with deployment-oriented docs.
• Updates the security defaults, agent support table, and architecture diagram text.

Confidence Score: 5/5

This looks safe to merge, with a few wording fixes worth making.

• No blocking issues found in the changed code.
• A few README statements can overstate setup, uninstall, and Cowork behavior.
• The comments are documentation clarity issues, not runtime breakages.

README.md

Important Files Changed

Filename	Overview
README.md	Updates self-serve setup, daemon, dashboard stream, and agent support documentation.

_{Reviews (1): Last reviewed commit: "Merge branch 'main' into docs/readme-sel..." | Re-trigger Greptile}

[michiosw]

Reviewed README against the code and recent commits — all factual claims verified true (LaunchAgent label/command, hook subcommands, managed.json path, SQLite store, judge-after-deterministic-allow, RFC 8693 token exchange, observe default, macOS-only). Three doc-accuracy points raised by the bot are resolved: uninstall scope and Claude Code enforce wording corrected as suggested; Cowork row updated to reflect that it is active by default via managed hooks since #338 (not the legacy cowork_enabled path). Approving — do not merge yet.

[michiosw]

Verified README claims against code and recent commits; all true. Three bot-flagged doc points resolved (uninstall scope, Claude Code enforce wording, and Cowork now active-by-default via managed hooks since #338). Do not merge yet.

[michiosw]

Verified all README claims against the code and recent commits — accurate. Three bot doc points resolved: uninstall scope and Claude Code enforce wording corrected; Cowork row updated to active-by-default via managed hooks (#338), not the legacy cowork_enabled path. Approving; do not merge yet.