refactor: remove paint service from kit stack

Removed miniPaint image editor service from the kit stack:
- Deleted paint service definition from kit/compose.yaml
- Removed Dockerfile for paint build
- Removed KIT_PAINT_TRAEFIK_HOST from arty.yml
- Stopped and removed kit_paint container

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

arty.yml

@@ -132,7 +132,6 @@ envs:
     KIT_LANDING_IMAGE: ghcr.io/valknarness/kit-ui:latest
     KIT_VERT_IMAGE: ghcr.io/vert-sh/vert:latest
     KIT_VERT_TRAEFIK_HOST: vert.kit.pivoine.art
-    KIT_PAINT_TRAEFIK_HOST: paint.kit.pivoine.art
     KIT_PASTEL_API_IMAGE: ghcr.io/valknarness/pastel-api:latest
     KIT_PASTEL_UI_IMAGE: ghcr.io/valknarness/pastel-ui:latest
     KIT_PASTEL_TRAEFIK_HOST: pastel.kit.pivoine.art

kit/Dockerfile

@@ -1,23 +0,0 @@
-# Build miniPaint from GitHub repository
-FROM node:18-alpine AS builder
-
-WORKDIR /app
-
-# Clone the repository
-RUN apk add --no-cache git && \
-    git clone https://github.com/viliusle/miniPaint.git . && \
-    npm install && \
-    npm run build
-
-# Production stage with nginx
-FROM nginx:alpine
-
-# Copy built files from builder
-COPY --from=builder /app/dist /usr/share/nginx/html
-
-# Copy nginx configuration if needed
-COPY --from=builder /app /usr/share/nginx/html
-
-EXPOSE 80
-
-CMD ["nginx", "-g", "daemon off;"]

kit/compose.yaml

@@ -53,34 +53,6 @@ services:
       # Watchtower
       - 'com.centurylinklabs.watchtower.enable=${WATCHTOWER_LABEL_ENABLE}'
 
-  paint:
-    build:
-      context: .
-      dockerfile: Dockerfile
-    image: minipaint:latest
-    container_name: ${KIT_COMPOSE_PROJECT_NAME}_paint
-    restart: unless-stopped
-    networks:
-      - compose_network
-    labels:
-      - 'traefik.enable=${KIT_TRAEFIK_ENABLED}'
-      # HTTP to HTTPS redirect
-      - 'traefik.http.middlewares.${KIT_COMPOSE_PROJECT_NAME}-paint-redirect-web-secure.redirectscheme.scheme=https'
-      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-paint-web.middlewares=${KIT_COMPOSE_PROJECT_NAME}-paint-redirect-web-secure'
-      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-paint-web.rule=Host(`${KIT_PAINT_TRAEFIK_HOST}`)'
-      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-paint-web.entrypoints=web'
-      # HTTPS router
-      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-paint-web-secure.rule=Host(`${KIT_PAINT_TRAEFIK_HOST}`)'
-      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-paint-web-secure.tls.certresolver=resolver'
-      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-paint-web-secure.entrypoints=web-secure'
-      - 'traefik.http.middlewares.${KIT_COMPOSE_PROJECT_NAME}-paint-compress.compress=true'
-      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-paint-web-secure.middlewares=${KIT_COMPOSE_PROJECT_NAME}-paint-compress,security-headers@file'
-      # Service
-      - 'traefik.http.services.${KIT_COMPOSE_PROJECT_NAME}-paint.loadbalancer.server.port=80'
-      - 'traefik.docker.network=${NETWORK_NAME}'
-      # Watchtower - disabled for paint (custom build)
-      - 'com.centurylinklabs.watchtower.enable=false'
-
   pastel_api:
     image: ${KIT_PASTEL_API_IMAGE:-ghcr.io/valknarness/pastel-api:latest}
     container_name: ${KIT_COMPOSE_PROJECT_NAME}_pastel_api