rift: drop MCP config (containers already stopped)

Remove mcp.nix/mcpkg.nix, MCP firewall ports, MCNS nameserver, and
~mcp.metacircular.net. Leave LUKS FIDO2. Do not delete /srv/mcp.

hw/rift/default.nix

@@ -4,8 +4,6 @@
   imports = [
     ./hardware-configuration.nix
     ./disk-config.nix
-    ../../configs/mcpkg.nix
-    ../../configs/mcp.nix
   ];
 
   config = {
@@ -14,16 +12,5 @@
       "fido2-device=auto"
       "token-timeout=10"
     ];
-
-    # Allow rootless containers (Podman) to bind port 53 for CoreDNS (MCNS precursor).
-    boot.kernel.sysctl."net.ipv4.ip_unprivileged_port_start" = 53;
-
-    # Open ports: DNS (53), mc-proxy (443, 8443, 9443), exod (8080, 9090).
-    networking.firewall.allowedTCPPorts = [ 53 443 8443 9443 8080 9090 ];
-    networking.firewall.allowedUDPPorts = [ 53 ];
-
-    # DNS: MCNS for internal zones, public resolvers as fallback.
-    networking.nameservers = [ "192.168.88.181" "1.1.1.1" "8.8.8.8" ];
-    services.resolved.settings.Resolve.Domains = [ "~mcp.metacircular.net" ];
   };
 }