retire frank-medium: tests, planning and observability ground on frank-primary

The frank-medium retirement tail the 2026-09-26 lucebox cutover left
uncommitted: the radiance quadlet tree, its swap/fetch tooling and its
seam test are deleted (archive copies live in dankserver/.AGENTTRASH/
20260926-frank-medium-radiance/ and scripts/.AGENTTRASH/20260926-
frank-medium-radiance/), the planner/allowlist/test-changed mappings
drop the service, and frank-large's chat template moves to scripts/
(its old home was the retired frank-medium dir).

Finished here:
- tests/frank_primary_unit.bats: the lucebox quadlet seam (boot
  persistence, host-network bind, HIP_VISIBLE_DEVICES=0,1, HIP-reserved
  env-name guard, checkout-mounted entrypoint/healthcheck, first-start
  patience, deployer payload/port gates).
- test-changed.sh: explicit .AGENTTRASH/ case — retirement commits move
  files to trash, and the wrapper refused those additions with "no
  focused-test mapping".
- observability: the vllm: namespace left with the radiance runtime.
  Rules keep only llamacpp:* series (prefix-cache reuse, spec-decode,
  queueing, endpoint-down); the dashboard drops the vLLM KV/latency
  panels; prometheus.yml documents that frank-primary (lucebox) has no
  /metrics and therefore no scrape job. llm-fleet.json was left
  corrupted mid-edit (missing opening brace) and is rewritten from HEAD.

Suite: 339 green (was 7 red).

tests/deployment_scoping.bats

@@ -46,25 +46,19 @@ REMOTE_DEPLOY="$REPO_ROOT/scripts/deploy-remote.sh"
     [ -z "$output" ]
 }
 
-@test "deployment planner maps the frank-medium container dir to frank-medium only" {
-    run python3 "$PLANNER" --target dankserver --paths \
-        dankserver/frank-medium/quadlet/frank-medium.container \
-        dankserver/frank-medium/radiance-entrypoint.sh \
-        dankserver/frank-medium/frank-medium-healthcheck.py
-    [ "$status" -eq 0 ]
-    [ "$output" = "frank-medium" ]
-
-    # The path is not the assertion: both retired shapes are still in the tree
-    # as archive, and a rule matching either would restart a service nobody
-    # runs. Assert the negatives explicitly, plus the llama trio's old paths,
-    # whose mapping was removed with the runtime.
-    run python3 "$PLANNER" --target dankserver --paths \
-        dankserver/.AGENTTRASH/20260916-vllm-radiance/frank-medium-a.container
-    [ "$status" -eq 0 ]
-    [ -z "$output" ]
+@test "the retired frank-medium tree plans nothing, from any archive" {
+    # frank-medium left the live tree on 2026-09-26 — first the radiance
+    # Quadlet (and its vLLM replica archive before it), then the llama.cpp
+    # layersplit trio and its fetch tooling. Every shape is archive material
+    # now, and a planner rule matching any of them would restart a service
+    # nobody maintains.
     run python3 "$PLANNER" --target dankserver --paths \
+        dankserver/.AGENTTRASH/20260916-vllm-radiance/frank-medium-a.container \
+        dankserver/.AGENTTRASH/20260926-frank-medium-radiance/frank-medium.container \
+        dankserver/.AGENTTRASH/20260926-frank-medium-radiance/radiance-entrypoint.sh \
         scripts/.AGENTTRASH/20260920-llama-layersplit/frank-medium.env.llamacpp-layersplit \
-        scripts/frank-medium.env
+        scripts/.AGENTTRASH/20260926-frank-medium-radiance/download-frank-medium-gguf.sh \
+        scripts/.AGENTTRASH/20260926-frank-medium-radiance/swap-frank-medium.sh
     [ "$status" -eq 0 ]
     [ -z "$output" ]
 }
@@ -202,7 +196,7 @@ REMOTE_DEPLOY="$REPO_ROOT/scripts/deploy-remote.sh"
     # The runner may restart inference only from the service-dispatch path. It
     # must not contain a host-wide restart loop.
     grep -q 'deploy_llm_large' "$REMOTE_DEPLOY"
-    grep -q 'deploy_llm_medium' "$REMOTE_DEPLOY"
+    grep -q 'deploy_llm_primary' "$REMOTE_DEPLOY"
     grep -q 'deploy_service' "$REMOTE_DEPLOY"
     ! grep -qE 'for .*frank-(small|large|npu)-?' "$REMOTE_DEPLOY"
 }