docs: media model = git files beside articles (Garage S3 dropped); update README/PLAN/maps

README.md

@@ -28,12 +28,12 @@ flowchart LR
     B --> MD[(Markdown render<br/>front-matter + shortcodes)]
   end
 
-  subgraph media["Media (Garage S3 on .13)"]
-    S3[(Garage S3<br/>kontra-day bucket)]
+  subgraph media["Media (git files)"]
+    F[(Images beside articles<br/>in the content repo)]
   end
 
   G -->|"SSH git"| P
-  B -->|"shortcode: media"| S3
+  B -->|"record: media"| F
   B -->|"emits HTML"| CB[Caddy master<br/>.35 :80/:443]
   CB -->|"reverse_proxy :8600"| B
 
@@ -57,7 +57,7 @@ flowchart LR
 | **Git is the content API** | Content has full history, rollback, branch review, and network-agnostic sync. No lock-in. |
 | **Automatic publish pipeline** | `git push` → 30 s later the site is live. We prove it end-to-end (add, change, delete). |
 | **Single-binary + embedded assets** | CSS, fonts, and the admin UI are compiled into the binary (`//go:embed`). Deploy = copy one file. |
-| **Self-hosted, privacy-first** | Gitea, Garage S3, Caddy, Decap all run on own network infra — no third-party SaaS for content or media. |
+| **Self-hosted, privacy-first** | Gitea + Caddy on own infra; media + content both live in git — no third-party SaaS, no object store to babysit. |
 
 ## The stack (GOTH)
 
@@ -68,8 +68,8 @@ flowchart LR
 | **Interactivity** | htmx (server-rendered, no JS framework) | Progressive enhancement, SEO-safe |
 | **Styling** | Tailwind-style **design tokens** (CSS custom properties) | Themeable via `DESIGN.md`, per-subject accent colours as data, not code |
 | **Markdown** | goldmark (CommonMark 0.31) | Content + front-matter (`title`, `author`, `date`, `subject`, `kicker`, `featured`…) |
-| **Admin** | Decap CMS | Browser editor over the same git repo; Gitea OAuth login (PKCE) |
-| **Media** | Garage S3 | `{{media:…}}` / `{{embed:vimeo:…}}` shortcodes resolved at render |
+| **Admin** | Decap CMS + Obsidian | Both edit the same git repo; Obsidian for daily writing + media drop-in |
+| **Media** | git files | Images live beside their article in the repo; `{{media:<slug>/<file>}}` shortcodes resolved at render |
 | **Git** | Gitea | Origin of truth; `sam/kontra-content` |
 | **Proxy** | Caddy | TLS termination, hostname routing |
 | **Deploy** | Docker + pull-loop | `git pull` every 30s; restart server on change |