[ci skip] Flatten module wrappers into stack roots

Remove the module "xxx" { source = "./module" } indirection layer
from all 66 service stacks. Resources are now defined directly in
each stack's main.tf instead of through a wrapper module.

- Merge module/main.tf contents into stack main.tf
- Apply variable replacements (var.tier -> local.tiers.X, renamed vars)
- Fix shared module paths (one fewer ../ at each level)
- Move extra files/dirs (factory/, chart_values, subdirs) to stack root
- Update state files to strip module.<name>. prefix
- Update CLAUDE.md to reflect flat structure

Verified: terragrunt plan shows 0 add, 0 destroy across all stacks.

stacks/servarr/module/flaresolverr/main.tf

@@ -1,74 +0,0 @@
-variable "tls_secret_name" {}
-variable "tier" { type = string }
-
-resource "kubernetes_deployment" "flaresolverr" {
-  metadata {
-    name      = "flaresolverr"
-    namespace = "servarr"
-    labels = {
-      app  = "flaresolverr"
-      tier = var.tier
-    }
-    annotations = {
-      "reloader.stakater.com/search" = "true"
-    }
-  }
-  spec {
-    replicas = 1
-    selector {
-      match_labels = {
-        app = "flaresolverr"
-      }
-    }
-    template {
-      metadata {
-        labels = {
-          app = "flaresolverr"
-        }
-      }
-      spec {
-        container {
-          image = "ghcr.io/flaresolverr/flaresolverr:latest"
-          name  = "flaresolverr"
-
-          port {
-            container_port = 8191
-          }
-        }
-      }
-    }
-  }
-}
-
-resource "kubernetes_service" "flaresolverr" {
-  metadata {
-    name      = "flaresolverr"
-    namespace = "servarr"
-    labels = {
-      app = "flaresolverr"
-    }
-  }
-
-  spec {
-    selector = {
-      app = "flaresolverr"
-    }
-    port {
-      name        = "http"
-      target_port = 8191
-      port        = 80
-    }
-  }
-}
-
-module "ingress" {
-  source          = "../../../../modules/kubernetes/ingress_factory"
-  namespace       = "servarr"
-  name            = "flaresolverr"
-  tls_secret_name = var.tls_secret_name
-  protected       = true
-  #   extra_annotations = {
-  #     "nginx.ingress.kubernetes.io/proxy-body-size" : "1G" // allow uploading .torrent files
-  #   }
-
-}