- &api-bindings -> {":metal, public:provider}; drop 7 redundant metal keys
  that broke keystone/ceph-radosgw/openstack-dashboard at deploy
- vault: *internal-bindings, drop options(vip 10.12.4.236 provider / hostname),
  comment vault-hacluster + vault:ha. vault is metal-only single-unit on the
  testcloud; provider VIP unreachable from metal & pointless at 1 unit.
  HA restored at Roosevelt (3 units, metal VIP via NetBox).
Counts: VIPs 11->10, apps 51->50, relations 98->97.