docs: rename frank-default-large/small/sightsound to frank-large/small/npu across vault

Mechanical identity rename across the knowledge base, AGENTS.md, README, the
hermes config example, and homepage services.json. No behavior change; served
aliases on the LLM endpoints change with the deploy of commit 69f87c8.

serverAppConfigs-docs/Dankclaw/Gitea.md

@@ -63,9 +63,16 @@ The containers use the quadlet fresh-start model. A stop removes the container (
 
 ## Secrets
 
-The database password lives in `/opt/gitea/.env` on the host (mode 0600). The quadlet files reference it with `EnvironmentFile=`. The password never enters this repository. Placeholders live in [`dankclaw/gitea/.env.example`](../../dankclaw/gitea/.env.example).
+The database password lives in `/home/dank/Containers/gitea/env` on the host
+(mode 0600); `gitea-postgres.container` and `gitea-server.container` load it
+via `EnvironmentFile=` (verified from the live units — the `${GITEA_DB_PASSWORD}`
+placeholders are expanded by systemd at start). The password never enters this
+repository. Placeholders live in
+[`dankclaw/gitea/.env.example`](../../dankclaw/gitea/.env.example).
 
-Do not change the password in place. Change the PostgreSQL role first, then update `/opt/gitea/.env` and the `[database] PASSWD` line in the app.ini (see Gotchas), then restart the stack.
+Do not change the password in place. Change the PostgreSQL role first, then
+update the env file and the `[database] PASSWD` line in the app.ini (see
+Gotchas), then restart the stack.
 
 ## Configuration files
 
@@ -73,23 +80,28 @@ Do not change the password in place. Change the PostgreSQL role first, then upda
 |------|----------|-----------|
 | Quadlet units | `~/.config/containers/systemd/gitea-{postgres,server}.container`, `gitea.network` | [`dankclaw/gitea/quadlet/`](../../dankclaw/gitea/quadlet/) |
 | Caddyfile | `/home/dank/Containers/caddy/Caddyfile` | [`dankclaw/Caddyfile`](../../dankclaw/Caddyfile) |
-| Secrets | `/opt/gitea/.env` (0600) | [`dankclaw/gitea/.env.example`](../../dankclaw/gitea/.env.example) |
+| Secrets | `/home/dank/Containers/gitea/env` (0600; loaded via `EnvironmentFile=`) | [`dankclaw/gitea/.env.example`](../../dankclaw/gitea/.env.example) |
 
 After editing a repo copy, deploy through `scripts/deploy.sh dankclaw`. The Gitea database/server units are installed from this directory; the canonical Caddy and its rendered Caddyfile are deployed as the separate `caddy` service. Do not manually recreate the retired `gitea-caddy` unit.
 
 ## Data volumes
 
+Per the live quadlet units (`Volume=` lines):
+
 | Container path | Host path | Contents |
 |----------------|-----------|----------|
-| `/data` | `/opt/gitea/data/gitea-gitea` | Git repositories, app.ini, attachments |
-| `/var/lib/postgresql/data` | `/opt/gitea/data/gitea-postgres` | PostgreSQL data |
+| `/data` | `/home/dank/Containers/gitea/data` | Git repositories, app.ini, attachments |
+| `/var/lib/postgresql/data` | `/home/dank/Containers/gitea/postgres` | PostgreSQL data |
 
-Back up `/opt/gitea/data/` (tar) or `pg_dump` the database. See the knowledge base page [[Gitea]].
+Back up `/home/dank/Containers/gitea/` (tar) or `pg_dump` the database. See the knowledge base page [[Gitea]].
 
 ## Gotchas
 
-- **app.ini wins over env vars.** Gitea writes `/data/gitea/conf/app.ini` (host: `/opt/gitea/data/gitea-gitea/gitea/conf/app.ini`) on first start. The `[database] HOST` and `PASSWD` lines persist and override the `DATABASE_HOST`/`DATABASE_PASSWD` env vars. When you rename the database container, edit the `HOST` line.
-- **The files in the data directory are owned by host UID 100999**, not `dank` (rootless ID mapping: container uid 1000 → host 100999). Edit them inside the container with `podman exec --user 1000 gitea-server ...`.
+- **Data files are owned by `dank` (uid 1000), not root.** The quadlet units run
+  podman in the user manager with no `--user`/UserNS override, so container uid
+  1000 is literally dank's host uid — there is no subuid offset for these
+  containers. Edit files as the owning user with
+  `podman exec --user 1000 gitea-server ...`.
 - **The host auto-reboots.** `unattended-upgrades` reboots Dankclaw when a package needs it. The quadlet units make Gitea survive that. See the 2026-08-16 incident below.
 - **Port 3000 vs 3001.** The live host port is 3000. The full-stack [`dankclaw/compose.yaml`](../../dankclaw/compose.yaml) maps 3001. Align the two before deploying the full stack.
 - **Legacy compose retired.** `/opt/gitea/podman-compose.yml` is retired to `/opt/gitea/.deprecated/`. Do not run it. Its containers collide with the Quadlet units on ports 3000 and 2222.