feat: initialize serverAppConfigs with podman stacks for Dankserver and Dankclaw

- Dankserver stack: RomM, Copyparty, Calibre-Web, node-exporter
- Dankclaw stack: Gluetun VPN (SearXNG tunnel), SearXNG+Valkey, ComfyUI
  (CPU backend), OpenWebUI, Hermes, Gitea+Postgres (migrated), Caddy
  reverse proxy, Grafana+Prometheus+Loki+Alloy observability
- Caddyfiles with .local hostname convention and basicauth homepage
- bind-mount storage policy, no named volumes
- deploy.sh mirroring vllmScripts git workflow (push -> pull -> restart -> health)
- docs/ Obsidian vault: per-service docs from frank-default-small research
  subagents (promtail EOL -> Alloy; gitea SECRET_KEY preservation; ComfyUI --cpu)
- bats test suite at 6 seams — 22 tests green

shared/alloy/config.alloy

@@ -0,0 +1,37 @@
+// Alloy configuration — ships host and container logs to Loki.
+// One instance per host. Deployed to /opt/alloy/config/config.alloy.
+
+logging {
+  level = "info"
+}
+
+// Local listener so the container healthcheck can probe us.
+server {
+  http_listen_addr = "0.0.0.0:12345"
+  grpc_listen_addr = "0.0.0.0:12346"
+}
+
+// Ship logs to Loki (container name on the podman network).
+loki.write "default" {
+  endpoint {
+    url = "http://loki:3100/loki/api/v1/push"
+  }
+}
+
+// Systemd journal from the host socket.
+loki.source.journal "journal" {
+  format_as_json = true
+  labels = {
+    job = "systemd-journal",
+  }
+  forward_to = [loki.write.default.receiver]
+}
+
+// Container logs (podman storage path; adjust for docker).
+loki.source.file "containers" {
+  targets = [
+    {__path__ = "/var/lib/containers/storage/overlay-containers/*/userdata/ctr.log", job = "podman"},
+    {__path__ = "/var/log/containers/*.log", job = "containers"},
+  ]
+  forward_to = [loki.write.default.receiver]
+}