chore: sync accumulated infra changes and docs

Removals: openwebui and netclaw compose + Traefik routes (both decommissioned).
Updates: litellm, n8n, vaultwarden, ai-agents, media, traefik routes, CLAUDE.md
(nodes/ports/known-issues), agent definitions.
Additions: Rongorongo tree, LinkedStorm plan, rename-bart spec, vllm brief,
tls-options and security-headers Traefik config.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

compose/gpu-machine/friday-voice/hermes-wrap

@@ -0,0 +1,5 @@
+#!/bin/sh
+# friday-voice invokes: hermes-wrap chat -q "<text>" --source friday-voice
+# We forward into the hermes container and add -Q (quiet) so only the final
+# response text is returned (no banner/spinner/box art) for clean TTS.
+exec docker exec hermes hermes "$@" -Q