seerr: quadlet on dankclaw + guard-chain vhost + deployer wiring

Unit: ghcr.io/seerr-team/seerr:v3.4.1, loopback-only 5055 publish
(homepage probe; users go through Anubis->Authentik->caddy:8017->seerr),
Containers data root, no env secrets. Guard chain: seerr.franksdank.cloud
vhost behind anubis:8923 with post-auth handler on 8017; addn-hosts record;
homepage widget; deploy-remote/deploy-plan/deploy.sh routing; seam test.

scripts/deploy-plan.py

@@ -28,6 +28,7 @@ SERVICE_ORDER = (
     "gitea-postgres",
     "gitea-server",
     "comfyui",
+    "seerr",
     "hermes",
     "hermes-dashboard",
     "hermes-webui",
@@ -70,6 +71,7 @@ DANKCLAW_SERVICES = {
     "gitea-postgres",
     "gitea-server",
     "comfyui",
+    "seerr",
     "hermes",
     "hermes-dashboard",
     "prometheus",
@@ -269,7 +271,7 @@ def services_for_path(path: str, target: str) -> set[str]:
         if len(parts) >= 2 and parts[1] == "Containerfile.comfyui":
             _add(services, "comfyui")
             return services
-        if len(parts) >= 2 and parts[1] in {"caddy", "comfyui", "loki", "alloy", "hermes", "anubis"}:
+        if len(parts) >= 2 and parts[1] in {"caddy", "comfyui", "loki", "alloy", "hermes", "anubis", "seerr"}:
             _add(services, parts[1])
             return services
         if len(parts) >= 4 and parts[1] == "authentik" and parts[2] == "quadlet":