docs(bootstrap): collapse setup into 1 Pinata restart + 1 owner ceremony

[CodySearsOS]

Summary

• Old Phases 0/1/2 (OpenSea key fetch, Privy creds paste, wallet creation) collapsed into a single Phase 0 with sub-steps 0a–0d and one Pinata restart at the end. Wallet creation passes PRIVY_APP_ID / PRIVY_APP_SECRET inline as subprocess env to opensea wallet create, so the same shell session can use the just-pasted creds without a restart-to-reload-env round trip first.
• Old Phases 3 + 4 (verify hardening, apply policy) merged into a new Phase 1 — One-time off-machine ceremony where the user takes their owner key out once to register owner + additional_signer + attach the spend policy in a single session, then types done for combined verification.
• Remaining phases renumbered: funding → Phase 2, conversation/identity → Phase 3, cleanup → Phase 4. IDENTITY.md and SOUL.md cross-refs updated to match.

Net effect: 3 Pinata restarts → 1. User owner-key off-machine sessions: 2 → 1.

Test plan

• Walk through Phase 0 from a clean deploy (no env vars set): confirm OpenSea key auto-fetch, Privy creds paste, wallet creation, and one batched restart at the end.
• Verify resumability: kill mid-Phase-0 (e.g., after only 0a/0b complete via Pinata UI), re-enter — sub-step skips should land on the right place.
• Walk through Phase 1 with a fresh wallet: verify combined off-machine ceremony succeeds in one session, and opensea wallet info shows ownerEnforcesAuthKey: true, additionalSignerCount >= 1, policyIds.length > 0.
• Simulate partial-state failures: e.g. user only registers owner without policy, confirm Phase 1 surfaces specifically policyIds.length == 0 and refuses to advance.
• Confirm SOUL.md refusal paths (no owner / no policy) point at Phase 1 and read coherently.

🤖 Generated with Claude Code