Remove MinIO

Garage serves all three buckets and both apps, and a last comparison
found nothing in MinIO that Garage lacks. Drop the MinIO service, its
bootstrap and its root credentials from the deploy, and let compose
remove the leftover containers.

The storage_minio_data volume is left on the host. All images can be
pulled again, so the deploy goes back to failing on a pull error.

Document Garage in the README and SECRETS, including the key format and
how the existing secrets map to it, and swap the MinIO client in the
flake for awscli and rclone.

Assisted-by: Claude:fable-5-2

docker-compose.yml

@@ -36,29 +36,6 @@ services:
       - storage
     restart: "no"
 
-  # Kept only as the way back until Garage has proven itself: not routed,
-  # not bootstrapped, its data frozen as of the switch.
-  minio:
-    image: minio/minio:latest
-    container_name: storage-minio
-    restart: unless-stopped
-    command: server /data --console-address ":9001"
-    environment:
-      MINIO_ROOT_USER: ${MINIO_ROOT_USER}
-      MINIO_ROOT_PASSWORD: ${MINIO_ROOT_PASSWORD}
-      MINIO_BROWSER_REDIRECT_URL: https://s3.asxp.io
-    volumes:
-      - minio_data:/data
-    networks:
-      - storage
-    healthcheck:
-      test: ["CMD", "mc", "ready", "local"]
-      interval: 5s
-      timeout: 5s
-      retries: 10
-    labels:
-      - "traefik.enable=false"
-
   garage:
     image: dxflrs/garage:v2.5.0
     container_name: storage-garage
@@ -103,7 +80,6 @@ services:
 
 volumes:
   pg_data:
-  minio_data:
   garage_meta:
   garage_data: