llm: retire the trio service names — fleet services renamed to frank-archon/frank-dragoon/frank-zealot

The 2026-10-09 wire aliases become the service names everywhere:
systemd units, serve scripts, env files and FRANK_* variables,
deploy-plan/deploy-remote service keys, container names, Prometheus
job names + alert rules, Grafana dashboard queries, bats seams,
runbook filenames, homepage/AGENTS lore, and historical prose.
Rollback tags renamed in lockstep. Residue in the tree: zero.
Retired frank-medium/small/npu names are history and stay.

Known casualty: scripts/patches/*.patch context lines were rewritten;
those retired-era vLLM-fork patches no longer apply byte-exact.

serverAppConfigs-docs/Operations/Payload and Disk Reclaim.md

@@ -49,7 +49,7 @@ table. Three buckets:
 - **retired** — maps to a retired runtime. Safe candidates.
 
 Trap: a directory can hold **both** a dead target and a live drafter
-(frank-large's DFlash2 drafter lives beside the previous target). Move the
+(frank-dragoon's DFlash2 drafter lives beside the previous target). Move the
 single file, never the directory, and say so in the manifest.
 
 ## 3. The live-reference check — before moving anything
@@ -64,7 +64,7 @@ done
 Then **read every hit**; do not count them. Most are benign (comments,
 retired fetch-script destinations, `retire_*_quadlet` helpers that move a
 quadlet not a model) — but on Dankclaw this check found a live bug:
-`serve-frank-secondary.sh`'s `: "${MODEL_DIR:=...}"` fallback still pointed at a
+`serve-frank-zealot.sh`'s `: "${MODEL_DIR:=...}"` fallback still pointed at a
 payload retired a week earlier. The env file always overrode it, so it was
 invisible; a missing env file would have produced a "missing asset" naming a
 model that no longer exists.
@@ -99,7 +99,7 @@ active).
 ## 5. Verify, then report — and do not purge
 
 ```sh
-systemctl is-active frank-large frank-secondary
+systemctl is-active frank-dragoon frank-zealot
 curl -s -o /dev/null -w '%{http_code}\n' http://127.0.0.1:7770/health
 ```
 
@@ -149,7 +149,7 @@ name**, never `endswith('.gguf')` — mradermacher ships large quants as
 
 ## Refresh per engine — know the recovery path BEFORE deleting
 
-- **frank-large (halogen)**: the engine fetches its own payload via
+- **frank-dragoon (halogen)**: the engine fetches its own payload via
   `HALOGEN_DOWNLOAD` when the checkpoint is absent. Clear the directory but
   leave it **existing and empty**, then start the unit. **Bind-mount trap:**
   podman refuses a mount whose source is missing