[ci skip] Flatten module wrappers into stack roots

Remove the module "xxx" { source = "./module" } indirection layer
from all 66 service stacks. Resources are now defined directly in
each stack's main.tf instead of through a wrapper module.

- Merge module/main.tf contents into stack main.tf
- Apply variable replacements (var.tier -> local.tiers.X, renamed vars)
- Fix shared module paths (one fewer ../ at each level)
- Move extra files/dirs (factory/, chart_values, subdirs) to stack root
- Update state files to strip module.<name>. prefix
- Update CLAUDE.md to reflect flat structure

Verified: terragrunt plan shows 0 add, 0 destroy across all stacks.

stacks/f1-stream/module/files/internal/extractor/browser.go

@@ -1,38 +0,0 @@
-package extractor
-
-import (
-	"log"
-	"os/exec"
-)
-
-const maxConcurrentSessions = 10
-
-var sessionSem chan struct{}
-
-// Init starts dbus, PulseAudio, and prepares the session semaphore.
-func Init() {
-	// Start dbus (Chrome needs it for accessibility/service queries)
-	if err := exec.Command("mkdir", "-p", "/var/run/dbus").Run(); err == nil {
-		if err := exec.Command("dbus-daemon", "--system", "--nofork").Start(); err != nil {
-			log.Printf("extractor: warning: failed to start dbus: %v", err)
-		}
-	}
-
-	if err := exec.Command("pulseaudio", "--start", "--exit-idle-time=-1").Run(); err != nil {
-		log.Printf("extractor: warning: failed to start PulseAudio: %v", err)
-	}
-	// Create a null-sink as the default audio target for all sessions
-	exec.Command("pactl", "load-module", "module-null-sink",
-		"sink_name=virtual_sink",
-		"sink_properties=device.description=VirtualSink").Run()
-	exec.Command("pactl", "set-default-sink", "virtual_sink").Run()
-
-	sessionSem = make(chan struct{}, maxConcurrentSessions)
-	log.Println("extractor: initialized")
-}
-
-// Stop kills PulseAudio.
-func Stop() {
-	exec.Command("pulseaudio", "--kill").Run()
-	log.Println("extractor: stopped")
-}