docs: one knowledge base for both workloads

- docs/index.md: LLM Fleet section (all 34 pages linked), merge note,
  See Also now internal
- docs/LLM/index.md: retitled, dangling [[Dankserver]]/[[Dankclaw]]
  links fixed, sibling section replaced with internal links
- docs/LLM/deployment.md: rewritten for the unified deploy flow,
  manual-update paths point at the merged checkout, incident history
  kept intact
- Deployment Flow / Dankclaw Stack / Gitea: stale vllmScripts
  references and retired-topology notes updated to the 2026-08-22
  state
- Historical docs (frank-redo, PP deployment, FastFlowLM) keep their
  dated runbook paths as-is (records of retired topologies)

docs/Dankclaw/Dankclaw Stack.md

@@ -1,8 +1,8 @@
 # Dankclaw Stack
 
 Dankclaw (192.168.0.143) runs the AI, search, and development stack. It
-hosts the vLLM inference endpoint (`frank-default-large`, `:52625`, from
-the `vllmScripts` repo), the agent tools, the privacy search, and the
+hosts the LLM inference endpoint (`frank-default-large`, `:52625`, CIRU
+ROCmFPX llama.cpp), the agent tools, the privacy search, and the
 observability stack. The llama.cpp endpoint (`frank-default-small`,
 `:7770`) runs on Dankserver (192.168.0.235).
 
@@ -17,7 +17,7 @@ graph LR
     S --> V[Gluetun VPN]
     O --> L[llama.cpp dankserver :7770]
     O --> H[Hermes]
-    O --> E[vLLM dankclaw :52625]
+    O --> E[CIRU llama.cpp :52625]
 ```
 
 ## Services
@@ -32,14 +32,14 @@ graph LR
 | Grafana | grafana.dankclaw.local | 3002 | [[Grafana]] |
 | Prometheus | prometheus.dankclaw.local | 9090 | [[Prometheus]] |
 | Homepage | dankclaw.local | 80/443 | — |
-| frank-default-large (host service, Dankclaw) | — | 52625 | [vllmScripts](../../vllmScripts/docs/index.md) |
-| frank-default-small (host service, Dankserver) | — | 7770 | [vllmScripts](../../vllmScripts/docs/index.md) |
+| frank-default-large (host service, Dankclaw) | — | 52625 | [[deployment]] |
+| frank-default-small (host service, Dankserver) | — | 7770 | [[deployment]] |
 
-The last two rows are bare-metal systemd services, not containers. The
-`vllmScripts` repository owns their scripts and knowledge base. The live
-mapping (verified 2026-08-19) is the reverse of the 2026-08-17 note:
-`frank-default-large` runs vLLM on Dankclaw; `frank-default-small` runs
-llama.cpp FastMTP on Dankserver.
+The last two rows are bare-metal systemd services, not containers. This
+repo owns their scripts, units, and knowledge base (see
+[docs/LLM/index.md](../LLM/index.md)). Current mapping (2026-08-22):
+`frank-default-large` runs the CIRU ROCmFPX llama.cpp on Dankclaw;
+`frank-default-small` runs the upstream llama.cpp on Dankserver.
 
 ## Boot Persistence
 
@@ -58,4 +58,4 @@ Deploy the SearXNG trio with `scripts/deploy-searxng-quadlet.sh dankclaw` and op
 - [[index]] — repository index
 - [[Network Architecture]] — routing and proxy
 - [[Observability]] — Grafana, Prometheus, logs
-- [vllmScripts knowledge base](../../vllmScripts/docs/index.md) — the model-serving endpoints on this host
+- [LLM fleet knowledge base](../LLM/index.md) — the model-serving endpoints on this host

docs/Dankclaw/Gitea.md

@@ -18,10 +18,10 @@ The containers share the private bridge network `systemd-gitea`. The quadlet net
 
 | Repository | Purpose |
 |------------|---------|
-| `dank/serverAppConfigs` | this repo — Podman stack configs |
-| `dank/vllmScripts` | model-serving scripts: llama.cpp FastMTP on Dankserver (`:7770`), vLLM on Dankclaw (`:52625`) |
+| `dank/serverAppConfigs` | this repo — Podman stacks + LLM fleet |
+| `dank/vllmScripts` | retired 2026-08-22 — merged into `dank/serverAppConfigs` (history preserved) |
 
-The vllmScripts knowledge base: [../vllmScripts/docs/index.md](../../vllmScripts/docs/index.md)
+The LLM fleet knowledge base: [docs/LLM/index.md](../LLM/index.md)
 
 ## Management
 
@@ -83,7 +83,7 @@ Back up `/opt/gitea/data/` (tar) or `pg_dump` the database. See the knowledge ba
 - **The files in the data directory are owned by host UID 100999**, not `dank` (rootless ID mapping: container uid 1000 → host 100999). Edit them inside the container with `podman exec --user 1000 gitea-server ...`.
 - **The host auto-reboots.** `unattended-upgrades` reboots Dankclaw when a package needs it. The quadlet units make Gitea survive that. See the 2026-08-16 incident below.
 - **Port 3000 vs 3001.** The live host port is 3000. The full-stack [`dankclaw/compose.yaml`](../compose.yaml) maps 3001. Align the two before deploying the full stack.
-- **Legacy compose retired.** `/opt/gitea/podman-compose.yml` is retired to `/opt/gitea/.deprecated/`. Do not run it; its containers would collide with the quadlet units on ports 3000, 2222, 80, and 443.
+- **Legacy compose retired.** `/opt/gitea/podman-compose.yml` is retired to `/opt/gitea/.deprecated/`. Do not run it. Its containers collide with the quadlet units on ports 3000, 2222, 80, and 443.
 - **Rootless cannot bind ports below 1024 by default.** `gitea-caddy` publishes 80 and 443. Without a host sysctl, `rootlessport` fails with `permission denied` and the unit crash-loops under `Restart=always`. The fix is a one-time sysctl: `net.ipv4.ip_unprivileged_port_start=80`, persisted in `/etc/sysctl.d/99-rootless-ports.conf`. Applied 2026-08-18 after a 13,000-restart crash loop.
 
 ## Incident: 2026-08-16 — down after unattended reboot