Remove the TUI; the web app is the frontend

money serve covers every screen the TUI had, so keeping both meant every
behaviour change landing twice. internal/tui goes, and with it bubbletea,
bubbles and lipgloss. `money` with no command now runs serve, the way it
used to open the TUI, and `money tui` is an unknown command.

Three invariants in CLAUDE.md were covered only by TUI tests. Two already
had web counterparts; TestPairedLegsAreNotUntagged is ported to the API:
a paired leg is neither listed as untagged nor offered to the rule
builder, while an unpaired one still is.

README's screen sections now describe the browser, which kept the
behaviour and changed only the controls. CLAUDE.md names the web
equivalents of the TUI functions its invariants pointed at, drops the tab
completion rule that only bubbles' textinput needed, and says how to test
the web app instead of how to drive a terminal.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

cmd/money/main.go

@@ -2,7 +2,7 @@
 //
 // The data root holds one folder per account. Drop statements into those
 // folders, run `money import`, and tag what comes out with glob rules in
-// rules.toml. Running it with no subcommand opens the TUI.
+// rules.toml. Running it with no subcommand serves the web app.
 package main
 
 import (
@@ -28,7 +28,6 @@ import (
 	"git.petrovv.com/nikola/money/internal/rules"
 	"git.petrovv.com/nikola/money/internal/store"
 	"git.petrovv.com/nikola/money/internal/transfers"
-	"git.petrovv.com/nikola/money/internal/tui"
 	"git.petrovv.com/nikola/money/internal/web"
 )
 
@@ -37,9 +36,9 @@ const usage = `money - statement-driven personal finance tracker
 usage: money [--root DIR] <command> [flags]   (--root may also follow the command)
 
 commands:
-  tui                  browse transactions, build the rules that tag them and the
-                       transfers that pair them across accounts (default)
-  serve                the same screens as a web app (--addr, default 127.0.0.1:8080)
+  serve                browse transactions, build the rules that tag them and the
+                       transfers that pair them across accounts, in a browser
+                       (--addr, default 127.0.0.1:8080; the default command)
   import               extract transactions from every statement into the index
   retag                re-apply rules.toml: retag everything and re-pair transfers
   ls                   list transactions
@@ -83,7 +82,7 @@ func run(args []string) error {
 		}
 	}
 
-	cmd := "tui"
+	cmd := "serve"
 	if len(args) > 0 {
 		cmd, args = args[0], args[1:]
 	}
@@ -120,8 +119,6 @@ func run(args []string) error {
 	case "parsers":
 		fmt.Println(strings.Join(parser.Names(), "\n"))
 		return nil
-	case "tui":
-		return cmdTUI(abs, args)
 	case "serve":
 		return cmdServe(abs, args)
 	case "help", "-h", "--help":
@@ -488,15 +485,6 @@ func cmdAccounts(root string, _ []string) error {
 	return w.Flush()
 }
 
-func cmdTUI(root string, _ []string) error {
-	o, err := open(root)
-	if err != nil {
-		return err
-	}
-	defer o.db.Close()
-	return tui.Run(root, o.db, o.accounts, o.engine, o.links)
-}
-
 // takeRoot removes --root/-root (as `--root DIR` or `--root=DIR`) from a
 // subcommand's arguments, returning the last value given. It stops at `--`,
 // after which everything is positional.
@@ -529,7 +517,7 @@ func takeRoot(args []string) (root string, rest []string, err error) {
 	return root, rest, nil
 }
 
-// cmdServe serves the TUI's screens over HTTP until interrupted. There is no
+// cmdServe serves the web app until interrupted. There is no
 // authentication, so it listens on loopback unless told otherwise: anyone who
 // can reach the port can rewrite rules.toml and start an import.
 func cmdServe(root string, args []string) error {