ansible: asxpio-services is managed by NixOS

With asxpio-services described in nixos/, Ansible only has asxpio-ops
left. Drop the runner, SillyTavern and Minecraft roles, the services
host from both inventories, and the WireGuard client play.

The s3fs role and playbook go as well: the mounts were switched off on
asxpio-ops, and on asxpio-services nothing read them. The credentials
file the role once wrote on asxpio-ops stays, because the backup script
there reads it.

site.yaml against asxpio-ops still changes nothing.

Assisted-by: Claude:fable-5-2

ansible/site.yaml

@@ -1,15 +1,16 @@
 ---
-# Everything the deploy pipeline manages. Idempotent: a run with nothing
+# Everything the deploy pipeline manages on asxpio-ops. asxpio-services
+# runs NixOS and is described in ../nixos. Idempotent: a run with nothing
 # to change touches nothing and restarts nothing.
 #
 #   ansible-playbook site.yaml --check --diff        # dry run
 #   ansible-playbook site.yaml --tags traefik        # one service
 #
-# Host bootstrap (WireGuard, SSH hardening, s3fs, swap) is in playbooks/
+# Host bootstrap (WireGuard, SSH hardening, swap) is in playbooks/
 # and is run by hand.
 
 - name: Host baseline
-  hosts: asxpio
+  hosts: ops_servers
   become: true
   roles:
     - { role: base, tags: [base] }
@@ -21,26 +22,9 @@
     - { role: traefik, tags: [traefik] }
     - { role: crawler_alert, tags: [crawler_alert] }
 
-- name: asxpio-services services
-  hosts: services_servers
-  become: true
-  roles:
-    - { role: sillytavern, tags: [sillytavern] }
-    - { role: minecraft, tags: [minecraft] }
-    - { role: minecraft_fossils, tags: [minecraft_fossils] }
-
 # Late: restarting Forgejo briefly cuts the runner off from its job log
 - name: Forgejo
   hosts: ops_servers
   become: true
   roles:
     - { role: forgejo, tags: [forgejo] }
-
-# Last: when the pipeline changes the runner it recreates the container
-# that is running the pipeline. Everything else is done by then; that job
-# ends as failed and the next run confirms the result.
-- name: Forgejo runner
-  hosts: services_servers
-  become: true
-  roles:
-    - { role: forgejo_runner, tags: [forgejo_runner] }