docs: add user-facing telemetry documentation

[Hweinstock]

Description

Adds docs/telemetry.md answering three concise questions for end users:

1. What is collected (and what is not).
2. How to inspect what's being sent locally (audit mode).
3. How to view and change opt-in/opt-out status (CLI command, config key, env var, and precedence).

Related Issue

Closes #

Documentation PR

N/A — this PR is the documentation.

Type of Change

• Bug fix
• New feature
• Breaking change
• Documentation update
• Other (please describe):

Testing

How have you tested the change?

• I ran npm run test:unit and npm run test:integ
• I ran npm run typecheck
• I ran npm run lint
• If I modified src/assets/, I ran npm run test:update-snapshots and committed the updated snapshots

Docs-only change. Verified prettier --check docs/telemetry.md passes.

Checklist

• I have read the CONTRIBUTING document
• I have added any necessary tests that prove my fix is effective or my feature works
• I have updated the documentation accordingly
• I have added an appropriate example to the documentation to outline the feature, or no new docs are needed
• My changes generate no new warnings
• Any dependent changes have been merged and published

---

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the
terms of your choice.

[agentcore-devx-automation]

Claude Security Review: no high-confidence findings. (run)

[github-actions]

Package Tarball

aws-agentcore-0.16.0.tgz

How to install

gh release download pr-1432-tarball --repo aws/agentcore-cli --pattern "*.tgz" --dir /tmp/pr-tarball
npm install -g /tmp/pr-tarball/aws-agentcore-0.16.0.tgz

[agentcore-cli-automation]

Doc-only PR with one substantive accuracy issue worth fixing before merge — the "What is collected" section under-discloses the per-session resource attributes relative to what the schema actually emits. Since the whole point of this doc is privacy transparency, it's worth being precise. Otherwise the content matches the implementation (audit mode, env vars, precedence, command names, schema link) and reads well.

[agentcore-devx-automation]

Claude Security Review: no high-confidence findings. (run)

[agentcore-devx-automation]

Claude Security Review: no high-confidence findings. (run)