Retire Gondulf and move StarPunk to v2.0.0 with Pocket ID login

StarPunk 2.0.0 logs in with Pocket ID and issues its own Micropub tokens
(ADR-064 in the StarPunk repo), so the Gondulf IndieAuth server is no
longer used. Removes its task, templates, Caddy route, subdomain and
service entry, and moves its DNS record to removed_records.

The StarPunk template was still on v1.6.0-rc.2 with Gondulf hairpin
hosts; deploying it would have broken login. It now matches production:
v2.0.0, Pocket ID hairpin, OIDC client from vault_starpunk.pocketid and
the admin sub in starpunk_admin_sub.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

roles/docker/tasks/infrastructure/gondulf.yml

@@ -1,28 +0,0 @@
-- name: make gondulf directories
-  ansible.builtin.file:
-    path: "{{ item }}"
-    state: directory
-  loop:
-    - /opt/stacks/gondulf
-
-- name: Template out the gondulf compose file
-  ansible.builtin.template:
-    src: gondulf-compose.yml.j2
-    dest: /opt/stacks/gondulf/compose.yml
-    owner: root
-    mode: '0644'
-
-- name: Template out the gondulf .env file
-  ansible.builtin.template:
-    src: gondulf-env.j2
-    dest: /opt/stacks/gondulf/.env
-    owner: root
-    mode: '0640'
-    group: docker
-  diff: false  # contains the secret key and SMTP password
-
-- name: deploy gondulf stack
-  community.docker.docker_compose_v2:
-    project_src: /opt/stacks/gondulf
-    files:
-    - compose.yml

roles/docker/tasks/infrastructure/main.yml

@@ -9,10 +9,6 @@
   import_tasks: pocketid.yml
   tags: pocketid
 
-- name: Install gondulf
-  import_tasks: gondulf.yml
-  tags: gondulf
-
 - name: Template out the dockge compose file
   ansible.builtin.template:
     src: dockge-compose.yml.j2