Remove retired Cloud authoring and capability paths #992

Parent

Spec: 1.0 tree cleanup and release contracts

What to build

Remove Variable Groups and cron across their authoring, runtime, API, UI, and persistence paths while preserving current Service and domain behavior. Custom-domain gating is not removed: per #977 it is reduced to "allowed when self-hosted or the Organization has an active subscription", read from the cached billing row, and wired at the existing ponytail comment in service-operations.server.ts.

Acceptance criteria

• Cloud's supported Service and domain workflows still work without the retired concepts.
• No UI, server, or schema references to Variable Groups or cron remain; affected tests assert supported behavior.
• Custom-domain linking is refused on hosted without an active subscription and always allowed on self-hosted, with one denial reason.

Blocked by

• Keep the SDK internal with WASM-only config