security: remove all hardcoded paths, usernames, IPs, and chat IDs from tracked files

- start.sh: use dirname instead of hardcoded path
- src/zcode.js: remove hardcoded chat_id fallback
- src/utils/rtk.js: use 'rtk' from PATH instead of hardcoded binary path
- src/telegram-bot.ts: use process.cwd() instead of hardcoded path
- TELEGRAM_SETUP.md: replace token/chat_id with placeholders
- QUICKSTART.md: sanitize all references
- SERVICE_MAP.md: use relative paths instead of absolute

start.sh

@@ -1,7 +1,7 @@
 #!/bin/bash
 # Startup script for zCode CLI X
 
-cd /home/uroma2/zcode-cli-x
+cd "$(dirname "$0")"
 
 # Check if .env exists
 if [ ! -f ".env" ]; then