frank-primary: Lucebox DeepSeek-V4.1-Flash-ROCMFP23 quadlet + deploy handler

Replaces frank-medium (vllm-radiance TP=2) on :7770. The 377.2 GiB
43-layer MoE (256 routed experts, top-6) is mmapped: dense work and the
MLA KV cache on the R9700, routed experts computed on CPU from the
page cache (246 GiB RAM). The unit bypasses the image entrypoint
(Qwen/DFlash-only flag set) and execs luce_server with the DS4 launch
shape; --ds4-fused-decode's monolithic-load fallback IS the serving
mode here. deploy_llm_primary gates on image + model byte count,
stops/masks the radiance unit, waits for :7770, installs and starts.
Runbook: frank-primary-lucebox-ds4.md.

tests/deployment_scoping.bats

@@ -69,6 +69,15 @@ REMOTE_DEPLOY="$REPO_ROOT/scripts/deploy-remote.sh"
     [ -z "$output" ]
 }
 
+@test "deployment planner maps the frank-primary container dir to frank-primary only" {
+    run python3 "$PLANNER" --target dankserver --paths \
+        dankserver/frank-primary/quadlet/frank-primary.container \
+        dankserver/frank-primary/frank-primary-entrypoint.sh \
+        dankserver/frank-primary/frank-primary-healthcheck.py
+    [ "$status" -eq 0 ]
+    [ "$output" = "frank-primary" ]
+}
+
 @test "the small endpoint is Dankclaw's again, and Dankserver's copy stays retired" {
     run python3 "$PLANNER" --target dankclaw --paths \
         scripts/frank-small.env scripts/frank-small.service scripts/serve-frank-small.sh