Manager-first deployment model: split runner, merge service/job, frontend→static

Replace the conflated `runner` axis with two orthogonal ones: `manager`
(systemd|caddy|path|none) — who supervises/realizes a deployment — and, for
systemd only, a nested `launcher` (python|command|container|compose|node) — how
the process starts. ServiceSpec and JobSpec collapse into one manager-
discriminated DeploymentSpec union (Systemd/Caddy/Path/Remote); the services/
and jobs/ config dirs collapse into one deployments/ dir. The human "kind"
(service|job|tool|static|reference) is fully derived (kind_for), never stored —
the frontend kind is renamed static. behavior is gone.

- core: DeploymentSpec union + LaunchSpec + kind_for; legacy-aware loader
  normalizes old runner shapes; CastleConfig.deployments with derived
  services/jobs/tools views; registry.Deployment carries manager/launcher/kind.
- cli: service/job/tool as filtered views + a deployment group; --behavior→--kind,
  create --runner→--launcher; lifecycle dispatches over config.deployments.
- castle-api: /deployments primary with /services,/jobs as views; summaries
  derive kind; PUT/DELETE /config/deployments/{name} (services/jobs aliased).
- app: KindBadge, frontend→static everywhere, pick-a-kind creation wizard,
  per-kind config editors.
- docs: single deployments/ layout, manager/launcher, static kind throughout.

Live migration verified byte-identical: regenerated Caddyfile and every unit
ExecStart line unchanged, so nothing restarted. Suites: core 124, cli 25,
castle-api 55; dashboard build + type-check clean.

app/src/components/ProgramActions.tsx

@@ -42,20 +42,16 @@ interface ProgramActionsProps {
   name: string
   actions: string[]
   active?: boolean | null
-  behavior?: string | null
-  /** Names of services/jobs deploying this program — daemons activate via these. */
-  deployedAs?: string[]
+  kind?: string | null
   compact?: boolean
   onOutput?: (output: ActionOutput) => void
 }
 
-/** install/uninstall (activate) is meaningful only for tools (PATH) and static
- * frontends (served). A daemon activates through a service/job, so it never
- * shows install/uninstall here — its run controls live on the deployment page. */
-function showsActivation(behavior: string | null | undefined, deployedAs: string[]): boolean {
-  if (behavior === "daemon") return false
-  if (behavior === "frontend") return deployedAs.length === 0 // self-serving frontend → its service
-  return true // tools (and unspecified)
+/** install/uninstall (activate) is meaningful only for a tool (a PATH deployment).
+ * Services, jobs, and static (caddy) deployments are managed through their
+ * deployment — never install/uninstall here. */
+function showsActivation(kind: string | null | undefined): boolean {
+  return kind === "tool"
 }
 
 function visibleActions(
@@ -94,16 +90,15 @@ export function ProgramActions({
   name,
   actions,
   active,
-  behavior,
-  deployedAs = [],
+  kind,
   compact,
   onOutput,
 }: ProgramActionsProps) {
   const { mutate, isPending } = useProgramAction()
   const [runningAction, setRunningAction] = useState<string | null>(null)
 
-  // Drop install/uninstall for behaviors that activate via a deployment.
-  const allowed = showsActivation(behavior, deployedAs)
+  // Drop install/uninstall for kinds that activate via a deployment.
+  const allowed = showsActivation(kind)
     ? actions
     : actions.filter((a) => a !== "install" && a !== "uninstall")
   const visible = visibleActions(allowed, active, !!compact)