Public-flip audit: env-driven paths, scrub audit-ticket prefixes, terser README

the host bind paths + LAN host pins replaced with env defaults. Repository URLs
→ git.sulkta.com. Audit-changelog scaffolding stripped from inline comments
(technical reasoning preserved). README sheds marketing scaffolding. AI-speak
in load-bearing prompts/SOULs left alone — that IS the product.

entrypoint.sh

@@ -1,14 +1,9 @@
 #!/usr/bin/env bash
-# Skald container entrypoint.
-#
 # Boots the embedded postgres via the pgvector image's own
 # docker-entrypoint, waits for it to accept connections, then execs
-# `skald` in the foreground. Tini is PID 1 (so it can reap zombies +
-# forward signals); we are PID 2; postgres becomes our child.
-#
-# This is explicitly "DB in the same container, for now" — when we
-# split the DB out (see project notes), the entrypoint reduces to
-# `exec /usr/local/bin/skald "$@"` and the pg startup goes away.
+# `skald` in the foreground. Tini is PID 1; postgres becomes our
+# child. When the DB is extracted to its own container, this reduces
+# to `exec /usr/local/bin/skald "$@"`.
 
 set -eo pipefail