fix(fleet): every LLM root unit restarts on a voluntary exit; parity seam gates it

frank-zealot shipped Restart=on-failure while its two siblings shipped
always. exit 0 is a CLEAN stop to systemd: on-failure leaves the endpoint
dark and the unit GREEN until the next boot — and frank-zealot is the
compaction hub for all three endpoints, so its quiet death degrades every
conversation in the fleet.

tests/llm_units.bats gains the fleet parity seam (Restart=always,
RestartSec 1..20, WantedBy=multi-user.target across scripts/frank-*.service);
the per-unit seams drop their weaker Restart greps so the policy lives in
one place. Runbook unit line updated.

scripts/frank-zealot.service

@@ -12,7 +12,11 @@ Group=dank
 LimitMEMLOCK=infinity
 Environment="FRANK_ZEALOT_ENV_FILE=/home/dank/serverAppConfigs/scripts/frank-zealot.env"
 ExecStart=/home/dank/serverAppConfigs/scripts/serve-frank-zealot.sh
-Restart=on-failure
+# Restart=always, the fleet law for LLM units: exit 0 is a CLEAN stop to
+# systemd, so on-failure leaves the endpoint dark (and the unit reporting
+# success) until the next boot. frank-zealot is the fleet's compaction hub —
+# every endpoint's compaction dies when it does.
+Restart=always
 RestartSec=10
 
 [Install]