security: scrub remaining leaked patterns, remove unnecessary files

- Replace clawd@ with user@ in README remote example
- Remove .ts.net domain from MCP SSH example
- Scrub service names from CHANGELOG
- Remove Tailscale reference from claude-code-setup
- Remove FEATURES.md and uv.lock (not needed in public)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: Paul Kyle

FEATURES.md

@@ -247,7 +247,7 @@ Output is TTY-aware: human-readable text in a terminal, JSON when piped. Overrid
 **Remote usage** (from another machine on your network):
 ```bash
 # Option A: SSH
-ssh clawd@your-server 'palinode search "query"'
+ssh user@your-server 'palinode search "query"'
 
 # Option B: Point at remote API
 export PALINODE_API=http://your-server:6340

README.md

@@ -16,7 +16,7 @@
 - `palinode session-end` command — capture session outcomes to daily notes + project status
 
 ### Changed
-- Removed Gemini API key from systemd service files (palinode-api, engram-api, engram-watcher) — all inference uses local Ollama/vLLM
+- Removed API keys from systemd service files — all inference uses local Ollama/vLLM
 
 ### Infrastructure
 - Configured Palinode MCP on calarts-mbp for Claude Desktop, Claude CLI, Antigravity IDE, Cursor

docs/CHANGELOG.md

@@ -20,7 +20,7 @@ Add this to `~/.claude/claude_desktop_config.json` on your Mac or remote server:
 }
 ```
 
-Or by IP (if Tailscale hostname doesn't resolve):
+Or by IP (if hostname doesn't resolve):
 ```json
 {
   "mcpServers": {

docs/claude-code-setup.md

@@ -15,7 +15,7 @@
     "mcpServers": {
       "palinode": {
         "command": "ssh",
-        "args": ["user@your-server.your-tailscale.ts.net",
+        "args": ["user@your-server",
                  "cd /path/to/palinode && venv/bin/python -m palinode.mcp"]
       }
     }