refactor(jobengine): delete TaskRunner service

- Remove TaskRunner source, tests, libraries (3 directories)
- Remove from compose, services-matrix, nginx, hosts, smoke tests
- Remove CLI commands, UI references, Authority scopes
- Remove docs, OpenAPI spec, QA state files
- Leave task_runner_id DB columns as nullable legacy
- PacksRegistry preserved (independent service)
- Eliminates 2 containers (taskrunner-web + taskrunner-worker)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

devops/compose/docker-compose.stella-ops.yml

@@ -162,7 +162,7 @@ volumes:
   advisory-ai-plans:
   advisory-ai-outputs:
   evidence-data:
-  taskrunner-artifacts-data:
+
 
 services:
   # ===========================================================================
@@ -435,7 +435,7 @@ services:
       STELLAOPS_RISKENGINE_URL: "http://riskengine.stella-ops.local"
       # STELLAOPS_JOBENGINE_URL removed: WebService retired; audit/first-signal now served by release-orchestrator
       STELLAOPS_RELEASE_ORCHESTRATOR_URL: "http://release-orchestrator.stella-ops.local"
-      STELLAOPS_TASKRUNNER_URL: "http://taskrunner.stella-ops.local"
+      # STELLAOPS_TASKRUNNER_URL removed: TaskRunner service deleted
       STELLAOPS_SCHEDULER_URL: "http://scheduler.stella-ops.local"
       STELLAOPS_GRAPH_URL: "http://graph.stella-ops.local"
       STELLAOPS_CARTOGRAPHER_URL: "http://cartographer.stella-ops.local"
@@ -1194,70 +1194,8 @@ services:
   # Workflow orchestration → workflow service (Slot 46)
   # Scheduler remains in Slot 14 (scheduler-web / scheduler-worker)
 
-  # --- Slot 18: TaskRunner ---------------------------------------------------
-  taskrunner-web:
-    <<: *resources-light
-    image: stellaops/taskrunner-web:dev
-    container_name: stellaops-taskrunner-web
-    restart: unless-stopped
-    depends_on: *depends-infra
-    environment:
-      ASPNETCORE_URLS: "http://+:8080"
-      <<: [*kestrel-cert, *router-microservice-defaults, *gc-light]
-      ConnectionStrings__Default: *postgres-connection
-      ConnectionStrings__Redis: "cache.stella-ops.local:6379"
-      TASKRUNNER__STORAGE__DRIVER: "postgres"
-      TASKRUNNER__STORAGE__POSTGRES__CONNECTIONSTRING: *postgres-connection
-      TASKRUNNER__STORAGE__OBJECTSTORE__DRIVER: "seed-fs"
-      TASKRUNNER__STORAGE__OBJECTSTORE__SEEDFS__ROOTPATH: "/app/artifacts"
-      Router__Enabled: "${TASKRUNNER_ROUTER_ENABLED:-true}"
-      Router__Messaging__ConsumerGroup: "taskrunner"
-    volumes:
-      - *cert-volume
-      - taskrunner-artifacts-data:/app/artifacts
-    ports:
-      - "127.1.0.18:80:80"
-    networks:
-      stellaops:
-        aliases:
-          - taskrunner.stella-ops.local
-      frontdoor: {}
-    healthcheck:
-      test: ["CMD-SHELL", "bash -c 'echo > /dev/tcp/$(hostname)/80'"]
-      <<: *healthcheck-tcp
-    labels: *release-labels
-
-  taskrunner-worker:
-    <<: *resources-light
-    image: stellaops/taskrunner-worker:dev
-    container_name: stellaops-taskrunner-worker
-    restart: unless-stopped
-    depends_on: *depends-infra
-    environment:
-      <<: [*kestrel-cert, *gc-light]
-      ConnectionStrings__Default: *postgres-connection
-      ConnectionStrings__Redis: "cache.stella-ops.local:6379"
-      TASKRUNNER__STORAGE__DRIVER: "postgres"
-      TASKRUNNER__STORAGE__POSTGRES__CONNECTIONSTRING: *postgres-connection
-      TASKRUNNER__STORAGE__OBJECTSTORE__DRIVER: "seed-fs"
-      TASKRUNNER__STORAGE__OBJECTSTORE__SEEDFS__ROOTPATH: "/app/artifacts"
-      # AirGap egress policy (disable for dev)
-      AirGap__Egress__Enabled: "false"
-    volumes:
-      - *cert-volume
-    tmpfs:
-      - /app/artifacts:mode=1777
-      - /app/queue:mode=1777
-      - /app/state:mode=1777
-      - /app/approvals:mode=1777
-      - /app/logs:mode=1777
-    networks:
-      stellaops:
-        aliases:
-          - taskrunner-worker.stella-ops.local
-    healthcheck:
-      <<: *healthcheck-worker
-    labels: *release-labels
+  # --- Slot 18: TaskRunner (REMOVED) ------------------------------------------
+  # taskrunner-web and taskrunner-worker deleted; task_runner_id DB columns left as nullable legacy
 
   # --- Slot 19: Scheduler ----------------------------------------------------
   scheduler-web: