fix(permissions): remove app.certified.signature.proof from the Certified set

app.certified.signature.proof does not exist as a record lexicon on main — it
is added by PR #219 (feat/signature-support-v2, HYPER-181). Including it here
made app.certified.permissions.crud reference a non-existent collection
(correctly flagged in review). Drop it, leaving the 8 app.certified.* record
collections that actually exist on main.

Documents in the Maintenance section that the set must gain
app.certified.signature.proof once #219 merges.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: aspiers

docs/design/permission-sets.md

@@ -150,7 +150,6 @@ Enumerates every `type: "record"` collection under `app.certified.*`:
             "app.certified.graph.follow",
             "app.certified.link.evm",
             "app.certified.location",
-            "app.certified.signature.proof",
           ],
           "action": ["create", "update", "delete"],
         },
@@ -267,6 +266,15 @@ new collection will be silently uncovered by the set. Worth a check in the
 release process (and ideally an automated test asserting each set lists exactly
 the `type: "record"` defs in its namespace).
 
+> **Known pending update.** PR
+> [#219](https://github.com/hypercerts-org/hypercerts-lexicon/pull/219)
+> (`feat/signature-support-v2`, HYPER-181) adds the `app.certified.signature.proof`
+> record lexicon, which does **not** exist on `main` yet and so is **not** in
+> `app.certified.permissions.crud` here. When #219 merges,
+> `app.certified.signature.proof` must be added to the set's `collection` list
+> (and re-published). The two PRs touch different files, so neither blocks the
+> other — this is just a follow-up to land after both.
+
 ## References
 
 - AT Protocol permission spec — permission sets:

lexicons/app/certified/permissions/crud.json

@@ -19,8 +19,7 @@
             "app.certified.badge.response",
             "app.certified.graph.follow",
             "app.certified.link.evm",
-            "app.certified.location",
-            "app.certified.signature.proof"
+            "app.certified.location"
           ],
           "action": ["create", "update", "delete"]
         }