Retire Gondulf and move StarPunk to v2.0.0 with Pocket ID login

StarPunk 2.0.0 logs in with Pocket ID and issues its own Micropub tokens
(ADR-064 in the StarPunk repo), so the Gondulf IndieAuth server is no
longer used. Removes its task, templates, Caddy route, subdomain and
service entry, and moves its DNS record to removed_records.

The StarPunk template was still on v1.6.0-rc.2 with Gondulf hairpin
hosts; deploying it would have broken login. It now matches production:
v2.0.0, Pocket ID hairpin, OIDC client from vault_starpunk.pocketid and
the admin sub in starpunk_admin_sub.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

group_vars/all/domains.yml

@@ -26,7 +26,6 @@ subdomains:
   listmonk: "listmonk.{{ secondary_domain }}"  # Listmonk mailing list
   gokapi: "gokapi.{{ primary_domain }}"  # Gokapi file sharing
   pocketid: "id.{{ primary_domain }}"  # Pocket ID passkey OIDC
-  gondulf: "gondulf.{{ primary_domain }}"  # IndieAuth for the main site
   starpunk: "starpunk.{{ primary_domain }}"  # Micropub for the main site
 
 # Email domains for notifications

group_vars/docker/services.yml

@@ -2,7 +2,7 @@
 
 # Service categories for organization
 service_categories:
-  infrastructure: ["caddy", "dockge", "gondulf"]
+  infrastructure: ["caddy", "dockge"]
   development: ["gitea", "bytestash"]
   media: ["audiobookshelf", "kavita", "hoarder", "manyfold"]
   productivity: ["paperlessngx", "baikal", "syncthing", "heyform", "dawarich", "obsidian-livesync", "gokapi"]
@@ -19,5 +19,8 @@ services:
   dawarich:
     db_name: "dawarich"
     db_user: "dawarich"
+# StarPunk admin: Pocket ID user ID (sub) of phil
+starpunk_admin_sub: "5754855f-0a30-4755-9609-7294209e40f4"
+
 # Gokapi super admin: must match the Pocket ID account email
 gokapi_admin_email: "phil@{{ primary_domain }}"