feat(models): reach the fleet from off-network through the OpenWebUI door

Every provider in agent/models.yml is a LAN address, so a workstation that
leaves the house has no model at all. Add `openwebui (franksdank.cloud)`:
the already-public OpenWebUI vhost as an OpenAI-compatible provider that
proxies the same engines, with frank-dragoon and frank-zealot rows and the
WAN row as its own compaction target. LAN rows, modelRoles and the speech
runner stay untouched — the door is purely additive.

The key is command-backed (`apiKey: "!cat ~/.config/secrets/openwebui_api_key"`,
mode 600) instead of inline: a literal sk-... in a tracked file is a key in
every agent context on every box that pulls this repo, and the pre-commit
shape gate would block it anyway. Rotate = rewrite the file + restart omp,
because a `!cmd` value is cached for the process lifetime.

Compat blocks copy their LAN twins because the proxy was probed, not assumed
(2026-10-21): streaming SSE carries reasoning_content and tool_calls deltas
plus final usage, image_url content parts reach both vision towers, and
chat_template_kwargs is forwarded — proven on frank-zealot, where
enable_thinking false yields zero reasoning and true a real block.
frank-archon gets no WAN row: OpenWebUI answers 400 "Model not found"
because its picker never published it, so that path is a fleet change.

Verified end-to-end from a scratch HOME whose LAN baseUrls point at a dead
port, so any answer can only have come through the door (text and a real
tool round-trip); `omp models` still lists all four chat providers and the
tts runner, so the file validates. bats 137/137, kb-lint clean.
Docs: omp-docs/core/wan-model-access.md.

omp-docs/log.md

@@ -24,6 +24,24 @@ long form.
 
 ## 2026-10-21
 
+### The WAN door into the model registry
+
+`openwebui (franksdank.cloud)` joins `agent/models.yml` — the already-public
+OpenWebUI vhost as an OpenAI-compatible provider, so a workstation outside the
+house still reaches `frank-dragoon` and `frank-zealot` while every LAN row stays
+untouched. The credential is command-backed
+(`apiKey: "!cat ~/.config/secrets/openwebui_api_key"`, 600-mode file): a literal
+`sk-…` in a tracked file is a key in every agent context on every box that pulls.
+
+Laws: **OpenWebUI forwards `chat_template_kwargs`**, so a proxied row copies its
+LAN twin's compat block instead of simplifying it — proved on `frank-zealot`,
+`enable_thinking` false giving zero reasoning and true a real block on one
+prompt; **the picker IS the API's model list**, `frank-archon` answers `400
+"Model not found"` because it was never published, so a WAN path for it is a
+fleet change on Dankclaw and not a harness one; and **a `!cmd` value is cached
+for the process lifetime**, so rotating a key without restarting omp leaves the
+old key working. Page: [core/wan-model-access.md](core/wan-model-access.md).
+
 ### the audit grows an advisory table, and corrects three of its own numbers
 
 `omp-docs/reports/fleet-security-audit-2026-10-21.html` folds in the two per-host vulnerability