Move ai-stack and paintplus vendored source under vendor/

Matches the existing vendor/easy-asterisk convention (used by
services/asterisk.sh) instead of two one-off top-level directories that
cluttered the repo root and didn't look like anything else next to
setup.sh, lib/, services/, extras/. Only the two services' own SRC_DIR
path resolution and header comments needed updating — nothing else in
the repo referenced the old ./ai-stack / ./paintplus paths.

Also documents vendor/ in README.md's Layout section.

README.md

@@ -176,6 +176,9 @@ backup
 setup.sh          dispatcher — wizard, direct install, --list, --dry-run
 lib/common.sh     shared helpers: logging, prompts, site config, OS detection
 services/         one file per service (self-registering)
+vendor/           full app source trees vendored for a service (e.g. ai-stack,
+                  paintplus, easy-asterisk) — copied into place at install time,
+                  no network clone needed
 extras/           non-Docker assets bundled with the repo (e.g. sync_cc.py)
 CLAUDE.md         contributor guide — how to add services, available helpers
 ```

services/ai-stack.sh

@@ -1,8 +1,8 @@
 #!/bin/bash
 # services/ai-stack.sh — Local AI Stack: a full self-hosted AI environment.
 #
-# Vendored from github.com/outis1one/local-ai into this repo under ./ai-stack and
-# copied to ~/docker/ai-stack at install time (no network clone). Bundles:
+# Vendored from github.com/outis1one/local-ai into this repo under vendor/ai-stack
+# and copied to ~/docker/ai-stack at install time (no network clone). Bundles:
 #   Ollama · Open WebUI · RAG + MCP servers · ChromaDB · SearXNG · Kiwix ·
 #   Gitea · InvokeAI · ComfyUI · Portainer
 #
@@ -26,7 +26,7 @@ install_ai-stack() {
     # Vendored application source lives in this repo at <repo>/ai-stack
     local SELF_DIR SRC_DIR
     SELF_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-    SRC_DIR="$(cd "$SELF_DIR/.." && pwd)/ai-stack"
+    SRC_DIR="$(cd "$SELF_DIR/.." && pwd)/vendor/ai-stack"
 
     local AS_DIR="$DOCKER_DIR/ai-stack"
 

services/paintplus.sh

@@ -2,8 +2,8 @@
 # services/paintplus.sh — PaintPlus: self-hosted AI photo editor. Paint a mask over
 # an object, describe the change, and AI replaces only that region.
 #
-# The full application source is vendored in this repo under ./paintplus and is
-# copied to ~/docker/paintplus/src at install time (no network clone).
+# The full application source is vendored in this repo under vendor/paintplus
+# and is copied to ~/docker/paintplus/src at install time (no network clone).
 # Based on EditmaskwithAI (github.com/outis1one/EditmaskwithAI).
 # Part of the modular post-install system (sourced by setup.sh).
 #
@@ -25,7 +25,7 @@ install_paintplus() {
     # Vendored application source lives in this repo at <repo>/paintplus
     local SELF_DIR SRC_DIR
     SELF_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-    SRC_DIR="$(cd "$SELF_DIR/.." && pwd)/paintplus"
+    SRC_DIR="$(cd "$SELF_DIR/.." && pwd)/vendor/paintplus"
 
     local PP_DIR="$DOCKER_DIR/paintplus"
     local APP_DIR="$PP_DIR/src"