chore: remove references to plugin sdk ARCHITECTURE.md

src/backend/plugins/ctx.ts

@@ -12,7 +12,7 @@
  *   - It does NOT contain malicious code. A plugin runs in the server process
  *     and can import any module core can. Guarding ctx does not change that,
  *     and this file does not pretend otherwise. Trust comes from signing,
- *     review and the kill list. See ARCHITECTURE.md.
+ *     review and the kill list.
  *
  * The actor never comes from plugin code. It comes from AsyncLocalStorage,
  * set by a request or by ctx.asUser, so a plugin cannot name a user and be

src/backend/plugins/loader.ts

@@ -9,7 +9,7 @@
  *
  * What that means honestly: a plugin has the same reach as core. The
  * capability gate on ctx makes privileged calls declared and auditable, not
- * impossible. See ARCHITECTURE.md.
+ * impossible.
  */
 
 import crypto from "node:crypto";