docs: gluetun retirement complete (docs merged, banner fixed, worktrees pruned)

Co-Authored-By: Claude Opus 4.8 <[email protected]>

DECISIONS-LOG.md

@@ -741,6 +741,10 @@ Operator approved the retirement and asked to update monitoring + docs. Done:
 - **Docs:** dispatched a worktree-isolated docs agent (`feature/docs-gluetun-retirement`) to rewrite
   `platform/vpn-egress/README.md` for ADR-0015 and fix ADR-0013→0015 / gluetun comment drift across
   kustomization, the kyverno egress-class policy, the servicedefinition schema, cluster-vars, the (now-unused)
-  pia-* secret headers, and the vpn-egress namespace note. In progress — PM review pending.
-- **Still open:** retire the unused `pia-*` cluster SOPS secrets (separate change); prune the two merged agent
-  worktrees.
+  pia-* secret headers, and the vpn-egress namespace note. Reviewed + merged (`9bc9b07`): the two `.sops.yaml`
+  edits verified comment-ONLY (zero data/sops/mac diffs — decryption safe), README rewrite accurate, build
+  gates green. Docs agent also caught a stale "NOT WIRED — DO NOT ADD TO kustomization" banner + done-TODO in
+  `egress-steering.yaml`; fixed (`75a38da`, comment-only). All three merged agent worktrees + their branches
+  pruned — only `main` remains.
+- **Still open (only item):** retire the now-unused `pia-*` cluster SOPS secrets in a separate change (creds
+  are host-side in the Ansible vault per docs/07).