fixup! Add one-command mock services demo

Author: sl5-guy

README.md

@@ -69,34 +69,6 @@ Gateway startup verifies the authorization registry schema version and fails fas
 
 Shut down cleanly with `Ctrl-C`.
 
-Register a principal signing key from the TPM owner machine with:
-
-```bash
-./registry-cli/register-principal-key.sh org-alice
-```
-
-The script creates or reuses a non-exportable TPM-backed P-256 key through `tpm2_ptool` and PKCS#11, stores only the public key in `principal_signing_keys`, and uses the friendly `key_id` (`org-alice`, `org-bob`, etc.) for the registry row. Run it on the machine that owns the TPM, with `AGENT_GATEWAY_DATABASE_URL` or `DATABASE_URL` pointing at Postgres.
-
-For a manual demo without `./demo/setup.sh`, use three windows:
-
-```bash
-# Principal shell: enroll the principal TPM public key.
-./registry-cli/register-principal-key.sh org-alice
-
-# Admin shell: grant destination delegation authority to that principal.
-./registry-cli/grant-principal-scope.sh org-alice docstore messaging api.anthropic.com
-
-# Principal shell: create a local agent handle with initial signed permissions.
-AGENT_HANDLE="$(./demo/demo-agent.sh create \
-  --identity agent-alpha \
-  --grant docstore \
-  --grant messaging)"
-
-# Principal shell: send the first prompt through that agent.
-./demo/demo-agent.sh prompt "$AGENT_HANDLE" \
-  --prompt "Access https://docstore/documents with curl."
-```
-
 ## Authorization Registry
 
 The gateway authorizes a CONNECT only when all of these checks pass: