feat: initialize serverAppConfigs with podman stacks for Dankserver and Dankclaw

- Dankserver stack: RomM, Copyparty, Calibre-Web, node-exporter
- Dankclaw stack: Gluetun VPN (SearXNG tunnel), SearXNG+Valkey, ComfyUI
  (CPU backend), OpenWebUI, Hermes, Gitea+Postgres (migrated), Caddy
  reverse proxy, Grafana+Prometheus+Loki+Alloy observability
- Caddyfiles with .local hostname convention and basicauth homepage
- bind-mount storage policy, no named volumes
- deploy.sh mirroring vllmScripts git workflow (push -> pull -> restart -> health)
- docs/ Obsidian vault: per-service docs from frank-default-small research
  subagents (promtail EOL -> Alloy; gitea SECRET_KEY preservation; ComfyUI --cpu)
- bats test suite at 6 seams — 22 tests green

dankserver/Caddyfile

@@ -0,0 +1,56 @@
+# Dankserver Caddyfile
+# Migrated from the live /etc/caddy/Caddyfile on dankserver, extended with the
+# new stack services. Native caddy (systemd) on this host; upstreams are host
+# ports because the services publish to the host.
+
+{
+	admin off
+	email admin@dankserver.local
+}
+
+# --- Homepage (password protected) ---
+dankserver.local {
+	basicauth {
+		dank $2a$14$REPLACE_WITH_HASH
+	}
+	root * /srv/homepage
+	file_server
+}
+
+# --- Plex (existing, kept) ---
+plex.franksdank.casa {
+	reverse_proxy localhost:32400
+}
+
+plex.franksdank.cloud {
+	reverse_proxy localhost:32400
+}
+
+plex.dankserver.local {
+	reverse_proxy localhost:32400
+}
+
+# --- Calibre-Web (existing, kept) ---
+books.franksdank.cloud {
+	reverse_proxy localhost:8083
+}
+
+books.dankserver.local {
+	reverse_proxy localhost:8083
+}
+
+# --- RomM ---
+romm.dankserver.local {
+	basicauth {
+		dank $2a$14$REPLACE_WITH_HASH
+	}
+	reverse_proxy localhost:8085
+}
+
+# --- Copyparty ---
+files.dankserver.local {
+	basicauth {
+		dank $2a$14$REPLACE_WITH_HASH
+	}
+	reverse_proxy localhost:3923
+}