docs: reconcile sunset of LiteLLM external, mcp-gateway, and LobeChat

- Bifrost replaces LiteLLM at ai.nuclide.systems (CT 104:14003); LiteLLM
  now internal-only backend at :14000
- mcp-gateway (FastAPI/DinD, mcp.nuclide.systems) decommissioned 2026-05-26;
  MCP now served by Bifrost at ai.nuclide.systems/mcp (29 clients, ~760 tools)
- LobeChat decommissioned 2026-05-26; chat.nuclide.systems now Open WebUI
  (CT 104:14002, stack ai/open-webui.yml)
- Update portmap, volumes, services-overview, homelab-architecture, zoraxy,
  mcp-servers, databases, README accordingly

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

infra/portmap.md

@@ -106,10 +106,11 @@ All arr-stack services run behind `vpn_gluetun` container network.
 
 | Port | Service | Container | Public URL | Notes |
 |---|---|---|---|---|
-| [14000](http://192.168.1.40:14000) | LiteLLM | `litellm` | [ai.nuclide.systems](https://ai.nuclide.systems) | LLM proxy gateway |
-| [14001](http://192.168.1.40:14001) | LobeHub | `lobehub` | [chat.nuclide.systems](https://chat.nuclide.systems) | Chat UI |
-| [14002](http://192.168.1.40:14002) | Qdrant | `qdrant_scientific` | — | Vector DB, internal only |
-| [8080](http://192.168.1.40:8080) | MCP Gateway | `mcp-gateway` | [mcp.nuclide.systems](https://mcp.nuclide.systems) | Pocket ID gated; spawns MCP servers on `ai-internal` |
+| [14000](http://192.168.1.40:14000) | LiteLLM | `litellm` | — | LLM proxy gateway — **internal only** (no Zoraxy route); Bifrost proxies to it at `http://litellm:4000` |
+| ~~14001~~ | ~~LobeHub~~ | ~~`lobehub`~~ | — | **DECOMMISSIONED 2026-05-26** — compose renamed `.DECOMMISSIONED-lobehub-2026-05-26.yml`; replaced by Open WebUI |
+| [14002](http://192.168.1.40:14002) | Open WebUI | `open-webui` | [chat.nuclide.systems](https://chat.nuclide.systems) | Chat UI; stack `ai/open-webui.yml`; uses Qdrant + TEI for RAG |
+| [14003](http://192.168.1.40:14003) | Bifrost | `bifrost` | [ai.nuclide.systems](https://ai.nuclide.systems) | LLM gateway + MCP at `/mcp`; auth via `sk-bf-` VKs; stack `ai/bifrost/` |
+| ~~8080~~ | ~~MCP Gateway~~ | ~~`mcp-gateway`~~ | — | **DECOMMISSIONED 2026-05-26** — compose renamed `.DECOMMISSIONED-2026-05-26`; MCP now at `https://ai.nuclide.systems/mcp` (Bifrost) |
 | [18002](http://192.168.1.40:18002) | ComfyUI | `comfyui` | — | LAN only (Intel Arc iGPU, FLUX.1-schnell GGUF) |
 | [18003](http://192.168.1.40:18003) | ComfyUI MCP | `comfyui-mcp` | — | FastMCP; reachable via gateway at `mcp.nuclide.systems/comfyui/mcp` |
 | [18005](http://192.168.1.40:18005) | Docling MCP | `docling-mcp` | — | SAIA Docling PDF→Markdown; reachable via gateway |
@@ -248,9 +249,8 @@ Zoraxy routes to these external backends:
 
 | Domain | Backend (NUC `192.168.1.40`) | Port |
 |---|---|---|
-| [ai.nuclide.systems](https://ai.nuclide.systems) | litellm | 14000 |
-| [chat.nuclide.systems](https://chat.nuclide.systems) | lobehub | 14001 |
-| [mcp.nuclide.systems](https://mcp.nuclide.systems) | mcp-gateway | 8080 |
+| [ai.nuclide.systems](https://ai.nuclide.systems) | bifrost | 14003 |
+| [chat.nuclide.systems](https://chat.nuclide.systems) | open-webui | 14002 |
 | [arcane.nuclide.systems](https://arcane.nuclide.systems) | arcane on CT 109 | **192.168.1.8**:10002 |
 | [gotify.nuclide.systems](https://gotify.nuclide.systems) | gotify | 10003 |
 | [vault.nuclide.systems](https://vault.nuclide.systems) | vaultwarden | 11001 |
@@ -264,7 +264,7 @@ Zoraxy routes to these external backends:
 | [dozzle.nuclide.systems](https://dozzle.nuclide.systems) | dozzle | 10001 |
 | [s3.nuclide.systems](https://s3.nuclide.systems) | garage | 10004 |
 
-**Not publicly proxied** (LAN / localhost only): pgadmin, paperless, paperless-ai, comfyui, comfyui-mcp, rdtclient, prowlarr, shelfarr, qdrant.
+**Not publicly proxied** (LAN / localhost only): litellm (internal only — no Zoraxy route), pgadmin, paperless, paperless-ai, comfyui, comfyui-mcp, rdtclient, prowlarr, shelfarr, qdrant.
 
 ---
 
@@ -278,8 +278,8 @@ Zoraxy routes to these external backends:
 
 | Client ID | Name | Redirect URIs |
 |---|---|---|
-| `e73bb7b9` | litellm | (empty = accept all) — used by LiteLLM UI + MCP Gateway |
-| `26f3c26b` | lobehub | `https://chat.nuclide.systems/api/auth/callback/generic-oidc` |
+| `e73bb7b9` | litellm | (empty = accept all) — used by LiteLLM UI (internal only); Bifrost auth uses `sk-bf-` VKs |
+| ~~`26f3c26b`~~ | ~~lobehub~~ | **DECOMMISSIONED 2026-05-26** — LobeChat removed; Open WebUI OIDC not yet wired |
 | `81cf4ed0` | arcane | `https://arcane.nuclide.systems/auth/oidc/callback` |
 | `33135ad4` | n8n | `https://n8n.nuclide.systems/auth/oidc/callback` |
 | `9c91c18b` | immich | `https://immich.nuclide.systems/auth/login` + mobile |