onlyoffice: decommission (stack destroyed, dir removed)

The document server had been deliberately scaled to 0/0 for 184 days, but
its ingress kept the uptime-kuma monitors alive, so 'onlyoffice down'
showed up in every daily alert digest. Viktor approved tearing it down.
terragrunt destroy ran clean (11 resources) before this commit; the kuma
monitors auto-prune with the ingress. Also drops the onlyoffice/* image
prefix from the kyverno trusted-registries allowlist, the service-catalog
rows, and updates the nextcloud collabora comment. Document data (if any)
remains on the PVE NFS share.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

stacks/kyverno/modules/kyverno/security-policies.tf

@@ -353,7 +353,7 @@ resource "kubectl_manifest" "policy_require_trusted_registries" {
                   "lissy93/*", "louislam/*", "matrixdotorg/*", "mauriceboe/*",
                   "mendhak/*",
                   "mghee/*", "mindflavor/*", "mpepping/*", "netboxcommunity/*",
-                  "netsampler/*", "nousresearch/*", "nvidia/*", "onlyoffice/*",
+                  "netsampler/*", "nousresearch/*", "nvidia/*",
                   "openresty/*", "opentripplanner/*", "owntracks/*",
                   "phpipam/*", "phpmyadmin/*", "privatebin/*", "prom/*",
                   "prompve/*", "rancher/*", "rhasspy/*", "roundcube/*", "sclevine/*",