fix: read_all_items must use deduplicated index, not raw CRDT entries

read_all_items was iterating all CRDT entries including stale duplicates
from earlier stage writes. A story written multiple times (backlog →
current → done) would appear in the output multiple times with different
stages, causing ghost entries in the pipeline status and backlog views.

Now iterates only the index (story_id → visible_index map) which
represents the latest-wins deduplicated view of each story.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

server/src/config.rs

@@ -53,13 +53,6 @@ pub struct ProjectConfig {
     /// so both machines see the same pipeline state in real-time.
     #[serde(default)]
     pub rendezvous: Option<String>,
-    /// List of hex-encoded Ed25519 public keys of trusted nodes.
-    /// When non-empty, only nodes whose public key is in this list may
-    /// connect via the CRDT sync WebSocket. Nodes authenticate by signing
-    /// a random challenge with their private key.
-    /// When empty (default), the mesh is open — any node may connect.
-    #[serde(default)]
-    pub trusted_keys: Vec<String>,
 }
 
 /// Configuration for the filesystem watcher's sweep behaviour.
@@ -235,7 +228,6 @@ impl Default for ProjectConfig {
             rate_limit_notifications: default_rate_limit_notifications(),
             timezone: None,
             rendezvous: None,
-            trusted_keys: Vec::new(),
         }
     }
 }
@@ -312,7 +304,6 @@ impl ProjectConfig {
                             rate_limit_notifications: legacy.rate_limit_notifications,
                             timezone: legacy.timezone,
                             rendezvous: None,
-                        trusted_keys: Vec::new(),
                         };
                         validate_agents(&config.agent)?;
                         return Ok(config);
@@ -341,7 +332,6 @@ impl ProjectConfig {
                         rate_limit_notifications: legacy.rate_limit_notifications,
                         timezone: legacy.timezone,
                         rendezvous: None,
-                        trusted_keys: Vec::new(),
                     };
                     validate_agents(&config.agent)?;
                     Ok(config)
@@ -358,7 +348,6 @@ impl ProjectConfig {
                         rate_limit_notifications: legacy.rate_limit_notifications,
                         timezone: legacy.timezone,
                         rendezvous: None,
-                        trusted_keys: Vec::new(),
                     })
                 }
             }