rename frank-small → frank-secondary (Dankclaw llama.cpp :7771)

Cross-cutting rename of the current llama.cpp endpoint on the RTX 3090
(port 7771) from frank-small to frank-secondary:

- Service trio: scripts/{frank-small.env,frank-small.service,
  serve-frank-small.sh,download-frank-small.sh} → frank-secondary.*
- Test: tests/frank_small_unit.bats → tests/frank_secondary_unit.bats
- Runbooks: serverAppConfigs-docs/LLM/frank-small-*.md →
  frank-secondary-*.md (9 files); the FreeToken runbook stays
  freetoken-frank-small.md (it documents the retired CUDA-era service)
- Identifiers: FRANK_SMALL→FRANK_SECONDARY, llm_small→llm_secondary,
  LLM_SMALL_*→LLM_SECONDARY_*, deploy_llm_small→deploy_llm_secondary
- Historical references to the OLD frank-small (FreeToken/CUDA on the
  3090, and the Dankserver service that became frank-medium) are
  preserved verbatim — they describe what the service was called
  at the time.

tests/observability_quadlet.bats

@@ -325,15 +325,15 @@ PAIRS
     # container, and on this netavark host a container can only reach the
     # host's LAN IP at a PUBLISHED port — a host-process bind like
     # llama-server's 0.0.0.0:7770 is refused at 192.168.0.143:7770 while it
-    # answers at 169.254.1.2:7770 (why frank-small stayed red by construction
+    # answers at 169.254.1.2:7770 (why frank-secondary stayed red by construction
     # for days until the 2026-09-20 /targets audit).
     local cfg="$REPO_ROOT/shared/prometheus/prometheus.yml"
-    grep -q '"host.containers.internal:7771"' "$cfg" || { echo "frank-small not scraped"; return 1; }
+    grep -q '"host.containers.internal:7771"' "$cfg" || { echo "frank-secondary not scraped"; return 1; }
     grep -q '"host.containers.internal:7770"' "$cfg" || { echo "frank-large not scraped"; return 1; }
     ! grep -q '"192.168.0.235:7770"' "$cfg"
     grep -q '"host.containers.internal:7770,192.168.0.235:7770"' "$cfg" \
         && { echo "frank-primary folded into a Dankclaw gateway target"; return 1; }
-    for job in frank-small frank-large; do
+    for job in frank-secondary frank-large; do
         grep -q "job_name: \"$job\"" "$cfg" || { echo "no scrape job for $job"; return 1; }
     done
     ! grep -q 'job_name: "frank-primary"' "$cfg"
@@ -383,11 +383,11 @@ for want in ('job:llm_prefix_cache_reuse:rate5m',
 # Every rule must be keyed to a series that actually exists. A rule naming a
 # series nobody exports evaluates nothing forever and errors never — the
 # failure this seam exists for. Since the 2026-09-26 cutover the only scraped
-# LLM runtime is llama.cpp (frank-small, frank-large); the vllm: family left
+# LLM runtime is llama.cpp (frank-secondary, frank-large); the vllm: family left
 # with frank-medium's radiance runtime and must not survive in any expr.
 exprs = [r.get('expr', '') for g in d['groups'] for r in g['rules']]
 # llama.cpp families measured from /metrics on 2026-09-16 and 2026-09-20
-# (frank-small, frank-large). Anything else is a guess.
+# (frank-secondary, frank-large). Anything else is a guess.
 live = {'llamacpp:prompt_tokens_total', 'llamacpp:prompt_tokens_cached_total',
         'llamacpp:requests_deferred', 'llamacpp:requests_processing',
         'llamacpp:spec_decode_num_drafts_total',