docs(street-level): shorten docs and comments before merge

Trim the doc text this PR adds (README, CHANGELOG, CURRENT-STATE,
KNOWN-ISSUES, SECURITY, DATA_SOURCES, .env.example, the CI job comment),
drop code comments that restate the code, cut design-note JSDoc to a line
or two, and drop review tags from test names. Comments only; no code
changes.

Also: README key count (seven keys, two metered), CURRENT-STATE's gate
paragraph (CI runs a production build with a dummy token), the stacked
doc above meshBoxInRange and the orphaned inMeshRange line in
coverage.js, and a duplicate ALPR row in DATA_SOURCES that a merge had
brought back.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

src/layers/streetLevel/providers/mapillary/source.js

@@ -7,11 +7,7 @@ import {
   SEQUENCE_IMAGES_LIMIT,
 } from './policy.js';
 
-/**
- * Error carrying the HTTP status and any server-provided payload: no token
- * (`keyRequired`), a token Mapillary rejected (`keyRejected`), or a rate
- * limit with the seconds to wait (`retryAfterSec`).
- */
+/** HTTP error flagged `keyRequired`, `keyRejected` or `retryAfterSec` (429). */
 export class MapillarySourceError extends Error {
   constructor(message, { status = 0, payload = null, retryAfterSec } = {}) {
     super(message);
@@ -44,10 +40,8 @@ async function readJsonOrThrow(response, label) {
 }
 
 /**
- * Every network path the Mapillary layer uses. Coverage tiles go through the
- * local dev-server proxy (which adds the token and caches them); image and
- * sequence lookups go straight to graph.mapillary.com with the client token,
- * exactly as the embedded MapillaryJS viewer does.
+ * Mapillary network access: tiles via the local proxy, which adds the token
+ * and caches; Graph API lookups direct with the client token, as MapillaryJS.
  * @param {{token?: string, fetchImpl?: Function, endpoints?: object}} options
  */
 export function createMapillarySource({