fix(install): add consent disclosure section (PILOT-393) (#271)

Add a consent & privacy section at the end of fresh installs that:
- Lists telemetry, broadcasts, reviews, and skillinject as features
  enabled by default
- Defines each in plain language
- Shows how to disable telemetry/broadcasts/reviews via config.json
  keys
- Shows the existing pilotctl skills disable/enable commands for
  skillinject

The disclosure only appears on fresh installs — the update path exits
before this section via the UPDATING early-return.

Closes PILOT-393

Co-authored-by: matthew-pilot <matthew@pilotprotocol.network>
Co-authored-by: Calin Teodor <t.calin@student.vu.nl>

Author: 3 people

install.sh

@@ -711,3 +711,39 @@ echo ""
 echo "  'disable' strips only the marker block from co-inhabited files"
 echo "  (CLAUDE.md, AGENTS.md, AGENT.md, SOUL.md) — your other content is preserved."
 echo ""
+# --- Consent disclosure ---
+
+echo "============================================"
+echo "  CONSENT & PRIVACY"
+echo ""
+echo "  By default, the daemon enables several optional features that"
+echo "  improve the Pilot Protocol experience. You are in control:"
+echo "  each can be disabled at any time without affecting core"
+echo "  messaging or networking functionality."
+echo ""
+echo "  Features ON by default:"
+echo ""
+echo "    telemetry   — app-store view/install interest signals"
+echo "    broadcasts  — messages Pilot pushes to agents from"
+echo "                  trusted networks"
+echo "    reviews     — occasional prompt to review installations"
+echo "    skillinject — auto-inject the Pilot Protocol skill into"
+echo "                  agent toolchains"
+echo ""
+echo "  Disable any feature by setting \"false\" in config.json:"
+echo "    ${PILOT_DIR}/config.json"
+echo ""
+echo "    \"telemetry\": false     # suppress interest signals"
+echo "    \"broadcasts\": false    # block agent-directed broadcasts"
+echo "    \"reviews\": false       # suppress review prompts"
+echo ""
+echo "  Skillinject has its own CLI commands:"
+echo "    pilotctl skills disable  # remove injected skills, stop future ticks"
+echo "    pilotctl skills enable   # re-install and re-enable"
+echo ""
+echo "  Config changes take effect on daemon restart (or immediately for"
+echo "  skillinject). No data is sent to Pilot Protocol LLC or any third"
+echo "  party unless you explicitly enable it."
+echo ""
+echo "============================================"
+echo ""