infra: decommission foolery agent UI

User no longer actively using foolery. Removed:
- TF stack stacks/foolery (Cloudflare DNS, Traefik IngressRoute,
  Authentik forward-auth integration, K8s Service+Endpoints)
- Devvm systemd unit /etc/systemd/system/foolery.service
- Runtime at ~/.local/share/foolery and launcher ~/.local/bin/foolery
- Stale foolery reference in .claude/CLAUDE.md auth="required" examples

Uptime Kuma [External] foolery monitor will auto-prune on next
external-monitor-sync reconcile.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

stacks/foolery/main.tf

@@ -1,78 +0,0 @@
-variable "tls_secret_name" {
-  type      = string
-  sensitive = true
-}
-
-resource "kubernetes_namespace" "foolery" {
-  metadata {
-    name = "foolery"
-    labels = {
-      "istio-injection" : "disabled"
-      tier = local.tiers.aux
-      "keel.sh/enrolled" = "true"
-    }
-  }
-  lifecycle {
-    # KYVERNO_LIFECYCLE_V1: goldilocks-vpa-auto-mode ClusterPolicy stamps this label on every namespace
-    ignore_changes = [metadata[0].labels["goldilocks.fairwinds.com/vpa-update-mode"]]
-  }
-}
-
-module "tls_secret" {
-  source          = "../../modules/kubernetes/setup_tls_secret"
-  namespace       = kubernetes_namespace.foolery.metadata[0].name
-  tls_secret_name = var.tls_secret_name
-}
-
-# Service + Endpoints to reverse-proxy to Foolery at 10.0.10.10:3210
-resource "kubernetes_service" "foolery" {
-  metadata {
-    name      = "foolery"
-    namespace = kubernetes_namespace.foolery.metadata[0].name
-    labels = {
-      app = "foolery"
-    }
-  }
-
-  spec {
-    port {
-      name        = "http"
-      port        = 80
-      target_port = 3210
-    }
-  }
-}
-
-resource "kubernetes_endpoints" "foolery" {
-  metadata {
-    name      = "foolery"
-    namespace = kubernetes_namespace.foolery.metadata[0].name
-  }
-
-  subset {
-    address {
-      ip = "10.0.10.10"
-    }
-    port {
-      name = "http"
-      port = 3210
-    }
-  }
-}
-
-module "ingress" {
-  source          = "../../modules/kubernetes/ingress_factory"
-  dns_type        = "proxied"
-  namespace       = kubernetes_namespace.foolery.metadata[0].name
-  name            = "foolery"
-  tls_secret_name = var.tls_secret_name
-  auth            = "required"
-  extra_annotations = {
-    "gethomepage.dev/enabled"      = "true"
-    "gethomepage.dev/name"         = "Foolery"
-    "gethomepage.dev/description"  = "Agent orchestration control room"
-    "gethomepage.dev/icon"         = "mdi-robot"
-    "gethomepage.dev/group"        = "AI"
-    "gethomepage.dev/pod-selector" = ""
-  }
-}

stacks/foolery/secrets

@@ -1 +0,0 @@
-../../secrets

stacks/foolery/terragrunt.hcl

@@ -1,3 +0,0 @@
-include "root" {
-  path = find_in_parent_folders()
-}