feat(backthink/admin): ③b — rag/delete 真实现 + D1 推送出口钩子(自建优先→个推兜底) + api-reference 补 D2/D3/D5 补丁

- B5: POST /admin/rag/delete 真做(DeleteDocument→DeleteProject 级联删章节+索引清理, owner+审计, 200/404/500, 500降级兜底); users/iot scenarios+rules 诚实501(无用户表/IoT场景规则模型, 消息写明缺什么, 不伪造), 锁住 501+not_implemented
- D1: backthink/push_outlet.go PushExporter{Export}; pushOutlet 自建HTTP(2xx=送达, token仅Authorization头+error脱敏)优先→Getui兜底(未接入, 诚实日志'getui not integrated'+(false,nil)); backthink.Deps.Exporter → pusher.withExporter, Push 在WS/IM后 exportAsync(detached+5s超时, 失败仅日志, 不破坏现有投递, 限流不上报); config PushOutletConfig(PUSH_EXPORTER_* + GETUI_*占位)
- 前端 Rag.tsx/api.ts 删除后 reload + 类型; Docs/api-client v0.31 + api-reference(#23 owner/200-404, §8.4, 端点表PATCH/DELETE messages + pinned + messages?q=)
- 测试(push_outlet/admin_rag_delete/admin_honest501/knowledge store), 后端+前端build全绿+3平台交叉编译
- 刻意: Getui SDK 未接入(无SDK不硬造), 主人自建服务填 PUSH_EXPORTER_URL/TOKEN 即可

cmd/cyrene/wire.go

@@ -536,12 +536,13 @@ func (a *app) wireAuxiliary() error {
 	a.automation = automation
 
 	bt, err := backthink.New(backthink.ConfigFromBackground(a.cfg.Background), backthink.Deps{
-		Bus:     a.bus,
-		Thinker: backthink.NewLoopThinker(a.loop, a.history),
-		Recent:  a.history,
-		State:   backthink.NewIoTStateProvider(iotMgr, a.log),
-		DB:      a.db,
-		Log:     logger.WithSource(a.log, "services/backthink"),
+		Bus:      a.bus,
+		Thinker:  backthink.NewLoopThinker(a.loop, a.history),
+		Recent:   a.history,
+		State:    backthink.NewIoTStateProvider(iotMgr, a.log),
+		Exporter: backthink.NewPushOutlet(a.pushOutletConfig()),
+		DB:       a.db,
+		Log:      logger.WithSource(a.log, "services/backthink"),
 	})
 	if err != nil {
 		return fmt.Errorf("backthink: %w", err)
@@ -555,6 +556,21 @@ func (a *app) wireAuxiliary() error {
 	return nil
 }
 
+// pushOutletConfig maps the environment push-outlet block into the backthink
+// exporter config. The Getui credentials are read by config but not consumed:
+// the fallback SDK is not integrated yet, so the outlet logs the pending tier
+// instead of faking a push. The token is passed through and never logged.
+func (a *app) pushOutletConfig() backthink.PushOutletConfig {
+	po := a.cfg.PushOutlet
+	return backthink.PushOutletConfig{
+		Enabled: po.Enabled,
+		URL:     po.URL,
+		Token:   po.Token,
+		Timeout: time.Duration(po.TimeoutSec) * time.Second,
+		Log:     a.log,
+	}
+}
+
 // wireChannels constructs the four IM channel adapters from environment
 // configuration, registers them so the admin API can enumerate them, and wires
 // them into the channel bridge so a configured adapter connects and routes