[callumalpass]

Summary

Adds one paragraph to the Connect accounts section of the privacy page. It says:

• the records Connect already retains, never collection contents, are used for aggregate operator reports: setup completion, approval and pairing outcomes, and which applications are connected and in use;
• direct same-computer use is visible only as per-account counts reported by the connector;
• Connect does not use third-party analytics;
• expired tokens, unfinished authorization and pairing requests, and protocol usage counts are deleted about 13 months after they expire or were last updated.

Matches mdbase-dev/mdbase-connect#475 (the usage report command and the retention worker).

This does not bump the accepted privacy-policy version (policy update --privacy-version). That remains a separate operator decision.