cleanup: reflect Go rewrite reality — remove legacy Python artifacts

Removed:
- bin/hermes (9.3MB compiled binary accidentally committed to git)
- oikos/console/ (Flask web console — replaced by Go REST API + SSE)
- mcp/server.py (Python MCP server — replaced by internal/mcp/)
- oikos/policy.yaml, oikos/ontology.yaml (duplicates of seeds/)

Kept:
- oikos/*.py kernel files (12 files) — still imported by bin/homelab
  for operational CLI commands (ssh, pct, logs, restart, status,
  open, secret, client, sync, mcp). Will be removed when bin/homelab
  is ported to Go.
- mcp/build_host_files.py — generates hosts/*.yaml from inventory,
  still operational. Will be ported to Go.
- bin/homelab — active Python CLI, still operational.

Updated:
- .gitignore: added bin/hermes, cleaned up legacy comments
- plans/index.md: listed all 4 active plans with accurate statuses

.gitignore

@@ -2,10 +2,14 @@
 __pycache__/
 *.pyc
 
-# Regenerated every scheduler run (every 10 min); no audit value in the
-# diff. Signals (signals/*.jsonl) ARE tracked — this is just the ephemeral
-# health-probe cache. See oikos/scheduler.py.
+# Regenerated every scheduler run; ephemeral health-probe cache.
 oikos/state.json
 
-.worktrees/bin/
+# Compiled binaries (Go rewrite — bin/oikos, bin/hermes)
 bin/oikos
+bin/hermes
+
+# Legacy Python oikos (superseded by cmd/oikos Go binary — Phase 1-6 rewrite).
+# oikos/ kernel files are still imported by bin/homelab for operational CLI
+# commands (ssh, pct, logs, restart, status, open, secret, client, sync, mcp).
+# Remove oikos/* when bin/homelab is ported to Go.