P0-09: Delete the unloaded Keepaway game and its data #187

Part of #175 (audit Phase 0). Decision D5: delete. Evidence: docs/audit/2026-11-09/detail/fundingcaptcha.md §2.

Why. ShowControl/FundingCAPTCHA/games/body_keepaway.py (498 LOC), keepaway-body-levels.json, keepaway-body-taunts.json, and the keepaway_body block at captcha-settings.json:44-49 are never loaded: app.py:349-351 hardcodes for name in ("bodycaptcha",), and test_app_games.py:26-28 asserts Keepaway is not loaded. Unplugged in #142 (2026-09-06), untouched since 2026-06-04. It duplicates confetti/blow-up and _make_activator code from bodycaptcha.py. Git history and the archive/pipes-prototype-3 tag era are the retention mechanism.

Do.

git rm ShowControl/FundingCAPTCHA/games/body_keepaway.py ShowControl/FundingCAPTCHA/keepaway-body-levels.json ShowControl/FundingCAPTCHA/keepaway-body-taunts.json

• Remove the keepaway_body block from captcha-settings.json.
• Drop the two Keepaway assertions in test_app_games.py; replace the comment at app.py:349-350 with nothing.
• Remove the now-unused BLUE export and the hud_font/top_bar_height imports left in games/.
• Update docs/FundingCAPTCHA.md:108,137 (the Keepaway mentions). docs/games/keepaway.md goes with P0-04.

Done when. grep -ri keepaway returns only ADR-0013's historical note; make test green.