feat(stack): remove Open WebUI and Qdrant

No longer needed - every client is a coding CLI behind the OmniRoute
gateway, not a chat UI. Drops the open-webui and qdrant services,
WEBUI_PORT/OPENWEBUI_OMNIROUTE_KEY env vars, and the openwebui-data/
qdrant-data volumes. Qdrant only ever served Open WebUI's own built-in
memory/RAG (unrelated to the gateway-level knowledgebase removed in
472e3a4), so it goes too rather than sit unused.

Docs updated: README, docs/network-access.md (ai.home/ai.haylan.ch
section was entirely about Open WebUI, rewritten around the gateway),
docs/proxy-key-onboarding.md, docs/proxy-request-priority.md.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01VPZ6TogJiYxG8E4EQBB197

docker-compose.yml

@@ -20,8 +20,8 @@ services:
       --n-gpu-layers ${LLAMA_GPU_LAYERS:-999}
       --ctx-size ${LLAMA_CTX_SIZE:-131072}
       --jinja
-    # No published host port: llama-server is reached only via the litellm
-    # proxy on the ai-stack docker network now — see issue #15. Its
+    # No published host port: llama-server is reached only via the omniroute
+    # gateway on the ai-stack docker network now — see issue #15. Its
     # unauthenticated API no longer needs to be LAN-reachable directly.
     expose:
       - "8080"
@@ -56,46 +56,6 @@ services:
         curl -L --fail --create-dirs -o /models/${LLAMA_MODEL_FILE:-Qwen3.8-27B-UD-Q4_K_XL.gguf}
         https://huggingface.co/unsloth/Qwen3.8-27B-GGUF/resolve/main/${LLAMA_MODEL_FILE:-Qwen3.8-27B-UD-Q4_K_XL.gguf}
 
-  qdrant:
-    image: qdrant/qdrant:latest
-    container_name: qdrant
-    volumes:
-      - qdrant-data:/qdrant/storage
-    restart: unless-stopped
-    networks: [ai-stack]
-    healthcheck:
-      test: ["CMD-SHELL", "bash -c 'exec 3<>/dev/tcp/localhost/6333'"]
-      interval: 10s
-      timeout: 5s
-      retries: 5
-
-  open-webui:
-    image: ghcr.io/open-webui/open-webui:main
-    container_name: open-webui
-    depends_on:
-      qdrant:
-        condition: service_healthy
-      omniroute:
-        condition: service_healthy
-    volumes:
-      - openwebui-data:/app/backend/data
-    env_file: .env
-    environment:
-      - WEBUI_AUTH=True
-      # Routed through the omniroute gateway, not llama-server directly — see
-      # issue #15 (original rationale) and #31 (litellm -> omniroute
-      # migration). OPENAI_API_KEY must be a per-workload key created for
-      # Open WebUI in the omniroute dashboard (Keys -> Create, label
-      # "openwebui") — no scripted mint yet, see docs/proxy-key-onboarding.md.
-      - OPENAI_API_BASE_URL=http://omniroute:${OMNIROUTE_API_PORT:-20129}/v1
-      - OPENAI_API_KEY=${OPENWEBUI_OMNIROUTE_KEY}
-      - VECTOR_DB=qdrant
-      - QDRANT_URI=http://qdrant:6333
-    ports:
-      - "${WEBUI_PORT:-8008}:8080"
-    restart: unless-stopped
-    networks: [ai-stack]
-
   # Replaces litellm — see issue #31 (wayfinder map) for the full migration
   # rationale/findings. No static config.yaml equivalent: provider routing
   # (llama-server, searxng-search) is registered once through the dashboard
@@ -165,6 +125,4 @@ networks:
 
 volumes:
   models:
-  qdrant-data:
-  openwebui-data:
   omniroute-data: