Remove svc:kiwix from tailscale_serve defaults

Kiwix is now hosted in k8s with its own Tailscale ingress.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

ansible/roles/tailscale_serve/defaults/main.yml

@@ -6,6 +6,8 @@ tailscale_serve_services:
   # NOTE: svc:grafana, svc:pg, svc:feed, svc:pypi removed - now hosted in k8s
   # NOTE: svc:k8s is configured by the minikube role (port is dynamic with docker driver)
 
+  # NOTE: svc:kiwix removed - now hosted in k8s (see argocd/apps/kiwix.yaml)
+
   - name: svc:forge
     https:
       port: 443
@@ -14,11 +16,6 @@ tailscale_serve_services:
       port: 22
       upstream: tcp://localhost:2200
 
-  - name: svc:kiwix
-    https:
-      port: 443
-      upstream: http://localhost:5501
-
   - name: svc:registry
     https:
       port: 443