todo: one file per item, grouped by theme, with a generated index

TODO.md had reached 1050 lines and 72 open items across 28 sections, read mostly
on a phone. It is now a directory: todo/<theme>/<item>.md, one card per file, with
frontmatter carrying id, status, created date and order, and the prose body copied
across verbatim. TODO.md becomes a generated index (bun run todo:index).

Dates: where an item's prose stated one it is used; otherwise its old section's;
otherwise 2026-08-20, floored at the day before the split rather than invented.
date_source records which.

Shaped for a two-way Kanban board, filed as todo/tooling — a card is a file, id is
the identity, frontmatter is the machine's half and the body is the owner's.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

todo/infra/delete-etc-systemd-system-officer-vnc-service.md

@@ -0,0 +1,18 @@
+---
+id: infra/delete-etc-systemd-system-officer-vnc-service
+title: "Delete `/etc/systemd/system/officer-vnc.service`"
+theme: infra
+status: open
+created: 2026-07-15
+date_source: stated
+order: 1
+---
+
+**Delete `/etc/systemd/system/officer-vnc.service`.** Hand-installed unit (not in this repo)
+that ran `vncserver :1 -geometry 1920x1080 -localhost yes -fg` with `Restart=on-failure`,
+enabled at boot — it kept a whole parallel XFCE session alive on `:1` (283 MB, 166 tasks)
+independently of the platform, and silently respawned it whenever the display was killed.
+Obsolete now that the Desktop panel mirrors `:0` via x11vnc. Disabled 2026-07-15
+(`systemctl disable --now`), but the unit file is still on disk. Nothing in the codebase
+recreates it and nothing documents it, so delete the file rather than leave a mystery service
+one `systemctl enable` away from returning.