ansible: asxpio-services is managed by NixOS

With asxpio-services described in nixos/, Ansible only has asxpio-ops
left. Drop the runner, SillyTavern and Minecraft roles, the services
host from both inventories, and the WireGuard client play.

The s3fs role and playbook go as well: the mounts were switched off on
asxpio-ops, and on asxpio-services nothing read them. The credentials
file the role once wrote on asxpio-ops stays, because the backup script
there reads it.

site.yaml against asxpio-ops still changes nothing.

Assisted-by: Claude:fable-5-2

ansible/inventory/group_vars/all/s3.yaml

@@ -1,39 +0,0 @@
----
-# S3 Object Storage Configuration
-# These should be overridden in vault or environment-specific vars
-
-# S3 Endpoint Configuration
-s3_region: hel1
-s3_endpoint: "https://{{ s3_region }}.your-objectstorage.com"
-
-# S3 Credentials
-# WARNING: Store these in ansible-vault encrypted file!
-# Override these in group_vars/all/vault.yaml (encrypted)
-s3_access_key: "{{ vault_s3_access_key | default('') }}"
-s3_secret_key: "{{ vault_s3_secret_key | default('') }}"
-
-# S3 Bucket names
-s3_bucket_terraform_main: asxpio-terraform-main
-s3_bucket_terraform_repl: asxpio-terraform-repl
-s3_bucket_backups_main: asxpio-backups-main
-s3_bucket_backups_repl: asxpio-backups-repl
-s3_bucket_immich_main: asxpio-immich-main
-s3_bucket_immich_repl: asxpio-immich-repl
-
-# S3 Buckets to mount on servers (non-replication only)
-s3_buckets:
-  - name: "{{ s3_bucket_terraform_main }}"
-    mount_point: /mnt/s3/terraform
-    owner: root
-    group: root
-    mode: "0755"
-  - name: "{{ s3_bucket_backups_main }}"
-    mount_point: /mnt/s3/backups
-    owner: root
-    group: root
-    mode: "0755"
-  - name: "{{ s3_bucket_immich_main }}"
-    mount_point: /mnt/s3/immich
-    owner: root
-    group: docker
-    mode: "0775"