seerr: quadlet on dankclaw + guard-chain vhost + deployer wiring

Unit: ghcr.io/seerr-team/seerr:v3.4.1, loopback-only 5055 publish
(homepage probe; users go through Anubis->Authentik->caddy:8017->seerr),
Containers data root, no env secrets. Guard chain: seerr.franksdank.cloud
vhost behind anubis:8923 with post-auth handler on 8017; addn-hosts record;
homepage widget; deploy-remote/deploy-plan/deploy.sh routing; seam test.

scripts/test-changed.sh

@@ -221,6 +221,13 @@ for path in "${CHANGED[@]}"; do
             add_test tests/deployment_flow.bats
             add_test tests/deployment_scoping.bats
             ;;
+        # Seerr unit on dankclaw: boot persistence, loopback-only port
+        # posture, and the deployer routing that installs it.
+        dankclaw/seerr/*)
+            add_test tests/seerr_quadlet.bats
+            add_test tests/deployment_flow.bats
+            add_test tests/deployment_scoping.bats
+            ;;
         report/*)
             # Frozen audit reports are point-in-time artifacts; not testable.
             ;;