chore(obsidian): remove the browser Obsidian GUI service (memory system intact)

[AlienWalker1995]

What

Removes the streamed-desktop Obsidian GUI service (the Selkies/KasmVNC linuxserver/obsidian container). The operator now browses the vault with native Windows Obsidian opened at C:\dev\ordo-ai-stack\data\memory-vault.

The memory system is 100% intact — the vault dir, the memory-vault MCP (gateway-spawned mcpvault), and the rag-ingestion → qdrant semantic indexing are all UNTOUCHED. Only the GUI viewer service is removed.

Changes

• Delete v2/plugins/obsidian/plugin.yaml (the whole service plugin).
• Caddy: remove the /obsidian/* reverse-proxy route (auth/caddy/Caddyfile).
• Dashboard integration: remove the obsidian entry from dashboard/services_catalog.py SERVICES, SSO_ROUTES['obsidian'] in dashboard/static/index.html (CRLF preserved), the obsidian entry in v2/docker/ops-api/main.py ALLOWED_SERVICES, and the obsidian-shape regression test in tests/test_services_and_throughput.py.
• Tests: removed obsidian-specific render tests; renamed test_obsidian_memory.py → test_memory_vault.py, keeping the generic shm_size renderer test and all memory-vault MCP tests. Parity/plugin counts adjusted (13→12 service plugins) in test_parity_render.py + test_plugins.py.
• Kept: the generic shm_size schema field in plugins.py/compose.py (reusable). Stale "Obsidian GUI browses the same dir" comments updated to "native Obsidian".
• Docs: v2/README.md plugin list + vault README.md updated to say the vault is browsed via native Obsidian.

Validation evidence

• v2 gate: ruff clean, 206 passed / 6 skipped.
• Root dashboard tests: ruff clean, dashboard/services subset green.
• Re-render diff (real 5090, --source out/ordo.yaml): diff = ONLY the obsidian service removed; llamacpp block byte-identical (md5 match, GPU-97fe65ee pin preserved, 9=9 pin refs).
• docker compose config → exit 0.
• LIVE APPLY done: obsidian container stopped+removed, new compose in out/ (.env/secrets.env runtime keys preserved), dashboard-v1 + ops-api images rebuilt and ONLY those two services recreated (--no-deps, both env files); caddy reloaded gracefully.
• Vault intact: 26 files before == 26 files after.
• MCP round-trip: read_note CONVENTIONS.md through the gateway → 200 with real note content.
• rag/qdrant untouched: documents collection intact, 18h/15h uptime.
• /obsidian/ through the edge: now 302→SSO→404 fall-through (no 502, no error spam in caddy logs).
• Dashboard services tab no longer lists obsidian; hw-stat widgets populated (disk + both GPUs).
• GPU/memory containers unchanged (llamacpp/agent/comfyui/mcp-gateway/qdrant IDs identical to baseline); data/obsidian-config deleted, linuxserver/obsidian image removed.

Attestation

Only the obsidian GUI removed; dashboard/ops-api/caddy updated to match. GPU services (llamacpp/agent/comfyui) and the memory system (vault + memory-vault MCP + rag/qdrant) untouched.

🤖 Generated with Claude Code