Remove the guest system entirely: no is_guest/device_id, no guest throttles, phone login is the only way in

accounts.0008 drops the columns and refuses to run while guest rows exist.
Docs describe the current state; tests that only proved guest behaviour are gone.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

rag/tests_guardrails.py

@@ -123,7 +123,7 @@ class GuardrailThroughTheApiTests(TestCase):
     def setUp(self):
         cache.clear()
         reset_clients_cache()
-        self.user = User.objects.create(device_id='dev-guardrail', is_guest=True, name='')
+        self.user = User.objects.create(phone='09000000037', name='')
         self.client = APIClient()
         self.client.credentials(HTTP_AUTHORIZATION=f'Bearer {issue_access_token(self.user.id)}')