feat: initialize serverAppConfigs with podman stacks for Dankserver and Dankclaw

- Dankserver stack: RomM, Copyparty, Calibre-Web, node-exporter
- Dankclaw stack: Gluetun VPN (SearXNG tunnel), SearXNG+Valkey, ComfyUI
  (CPU backend), OpenWebUI, Hermes, Gitea+Postgres (migrated), Caddy
  reverse proxy, Grafana+Prometheus+Loki+Alloy observability
- Caddyfiles with .local hostname convention and basicauth homepage
- bind-mount storage policy, no named volumes
- deploy.sh mirroring vllmScripts git workflow (push -> pull -> restart -> health)
- docs/ Obsidian vault: per-service docs from frank-default-small research
  subagents (promtail EOL -> Alloy; gitea SECRET_KEY preservation; ComfyUI --cpu)
- bats test suite at 6 seams — 22 tests green

dankclaw/Caddyfile

@@ -0,0 +1,76 @@
+# Dankclaw Caddyfile
+# Reverse proxy for the Dankclaw stack. Caddy runs as a container on the
+# podman network; upstreams are container names. Homepage is password
+# protected. Replace the bcrypt hashes below (caddy hash-password) at deploy.
+
+{
+	admin off
+	email admin@dankclaw.local
+}
+
+# --- Homepage (password protected) ---
+dankclaw.local {
+	basicauth {
+		dank $2a$14$REPLACE_WITH_HASH
+	}
+	root * /srv/homepage
+	file_server
+}
+
+# --- SearXNG (behind the Gluetun tunnel) ---
+search.dankclaw.local {
+	basicauth {
+		dank $2a$14$REPLACE_WITH_HASH
+	}
+	reverse_proxy gluetun:8080
+}
+
+# --- ComfyUI ---
+comfyui.dankclaw.local {
+	reverse_proxy comfyui:8188
+}
+
+# --- OpenWebUI ---
+chat.dankclaw.local {
+	basicauth {
+		dank $2a$14$REPLACE_WITH_HASH
+	}
+	reverse_proxy openwebui:8080
+}
+
+# --- Hermes ---
+hermes.dankclaw.local {
+	basicauth {
+		dank $2a$14$REPLACE_WITH_HASH
+	}
+	reverse_proxy hermes:8090
+}
+
+# --- Gitea (migrated) ---
+gitea.dankclaw.local {
+	reverse_proxy gitea:3000
+}
+
+# --- Grafana ---
+grafana.dankclaw.local {
+	basicauth {
+		dank $2a$14$REPLACE_WITH_HASH
+	}
+	reverse_proxy grafana:3000
+}
+
+# --- Prometheus ---
+prometheus.dankclaw.local {
+	basicauth {
+		dank $2a$14$REPLACE_WITH_HASH
+	}
+	reverse_proxy prometheus:9090
+}
+
+# --- Loki ---
+loki.dankclaw.local {
+	basicauth {
+		dank $2a$14$REPLACE_WITH_HASH
+	}
+	reverse_proxy loki:3100
+}