docs(arr): fleet consolidated on FrankBook-Pro, VPN egress proven; E2E counts derived from registry

AGENTS.md

@@ -2,17 +2,22 @@
 
 ## Overview
 
-This repository is the single source of truth for the two homelab servers. It
-tracks both the Podman container stacks and the LLM inference fleet. One repo,
-one checkout per host, one deploy script.
+This repository is the single source of truth for the two homelab servers
+and the FrankBook-Pro Mac mini. It tracks the Podman container stacks and
+the LLM inference fleet. One repo, one checkout per host, one deploy script.
 
 - **Dankserver** (192.168.0.235) — media/library stack (RomM, Copyparty,
-  Calibre-Web, the *arr stack, Jellyfin) as bare containers, plus the
-  `frank-small` LLM service.
+  Calibre-Web, Jellyfin, Plex) as bare containers, plus the `frank-small`
+  LLM service.
 - **Dankclaw** (192.168.0.143) — AI/search/development/observability stack
-  (SearXNG via Gluetun, ComfyUI, OpenWebUI, Hermes, Gitea, Grafana, Prometheus,
-  Loki, Alloy, Pi-hole) plus the `frank-large` LLM service. Caddy on
-  Dankclaw reverse-proxies both hosts.
+  (SearXNG via Gluetun, ComfyUI, OpenWebUI, Hermes, Gitea, Grafana,
+  Prometheus, Loki, Alloy, Pi-hole) plus the `frank-large` LLM service.
+  Caddy on Dankclaw reverse-proxies both hosts.
+- **FrankBook-Pro** (192.168.0.112) — macOS mini running the *arr stack
+  (Prowlarr, Sonarr, Radarr, Lidarr, Readarr, qBittorrent) as quadlets
+  inside its podman machine; every container rides the Gluetun WireGuard
+  netns, so all *arr and qBittorrent egress is VPN-tunneled. Deployed via
+  the `frankbook-pro` handler.
 
 **2026-08-22 merge:** the former `vllmScripts` repository (LLM fleet scripts,
 units, env tunables, and runbook) is merged into this repo. Its full git