frank-large: CIRU v4.4.1 Orca cutover — root unit, one stream, full context

Operator call 2026-09-19: switch the iGPU endpoint from
halogen-flash-server to jcbtc/Qwen3.8-Flash-CIRU-STRIX-Orca on the CIRU
v4.4.1 runtime with the QSA window hotfix (host build against the private
ROCm 10 SDK), one stream of the full 262144 trained window.  The service
leaves the quadlet shape for a root unit (the same shape as frank-small and
frank-medium: a private-SDK host binary has no image to install and no
generated unit to dodge); the halogen quadlet is archived, the deploy
handler retires it on the host, gates on 7770, and its stray-run sweep
matches the model path so it cannot take frank-small down.

scripts/deploy-plan.py

@@ -314,11 +314,8 @@ def services_for_path(path: str, target: str) -> set[str]:
         if len(parts) >= 2 and parts[1] == "open-webui":
             _add(services, "open-webui")
             return services
-        if len(parts) >= 2 and parts[1] == "frank-large":
-            # The service is a rootless Quadlet container since 2026-09-11;
-            # its unit and fleet settings live in one .container file.
-            _add(services, "frank-large")
-            return services
+        # frank-large left the quadlet shape on 2026-09-19 (CIRU v4.4.1 host
+        # build, root unit): its files live in scripts/ and map there.
         if len(parts) >= 2 and parts[1] == "observability":
             # The five observability containers became Quadlet units on
             # 2026-09-11. A unit change selects exactly its own service;
@@ -414,6 +411,12 @@ def services_for_path(path: str, target: str) -> set[str]:
             # runtime and payload are host-side one-offs: they change no
             # deployed state, so they select nothing.
             _add(services, "frank-medium")
+        if name in {"frank-large.env", "frank-large.service", "serve-frank-large.sh"}:
+            # CIRU v4.4.1 frank-large (2026-09-19) keeps its unit, env and
+            # serve files here the same way: a root unit on a host-built
+            # runtime. The download script fetches the payload, which is
+            # host-side state, so it selects nothing.
+            _add(services, "frank-large")
         # Deployment/test/benchmark scripts and other repo tooling do not
         # restart a runtime service.
         return services