Manager-first deployment model: split runner, merge service/job, frontend→static

Replace the conflated `runner` axis with two orthogonal ones: `manager`
(systemd|caddy|path|none) — who supervises/realizes a deployment — and, for
systemd only, a nested `launcher` (python|command|container|compose|node) — how
the process starts. ServiceSpec and JobSpec collapse into one manager-
discriminated DeploymentSpec union (Systemd/Caddy/Path/Remote); the services/
and jobs/ config dirs collapse into one deployments/ dir. The human "kind"
(service|job|tool|static|reference) is fully derived (kind_for), never stored —
the frontend kind is renamed static. behavior is gone.

- core: DeploymentSpec union + LaunchSpec + kind_for; legacy-aware loader
  normalizes old runner shapes; CastleConfig.deployments with derived
  services/jobs/tools views; registry.Deployment carries manager/launcher/kind.
- cli: service/job/tool as filtered views + a deployment group; --behavior→--kind,
  create --runner→--launcher; lifecycle dispatches over config.deployments.
- castle-api: /deployments primary with /services,/jobs as views; summaries
  derive kind; PUT/DELETE /config/deployments/{name} (services/jobs aliased).
- app: KindBadge, frontend→static everywhere, pick-a-kind creation wizard,
  per-kind config editors.
- docs: single deployments/ layout, manager/launcher, static kind throughout.

Live migration verified byte-identical: regenerated Caddyfile and every unit
ExecStart line unchanged, so nothing restarted. Suites: core 124, cli 25,
castle-api 55; dashboard build + type-check clean.

app/src/pages/ProgramDetail.tsx

@@ -1,7 +1,7 @@
 import { useState } from "react"
 import { useParams } from "react-router-dom"
 import { useProgram } from "@/services/api/hooks"
-import { runnerLabel, subdomainUrl } from "@/lib/labels"
+import { launcherLabel, subdomainUrl } from "@/lib/labels"
 import { DetailHeader } from "@/components/detail/DetailHeader"
 import { ConfigPanel } from "@/components/detail/ConfigPanel"
 import { DeploymentsSection } from "@/components/detail/DeploymentsSection"
@@ -27,11 +27,11 @@ export function ProgramDetailPage() {
     )
   }
 
-  // A static frontend (frontend behavior, build outputs, no service) is served by
-  // the gateway in place at its own subdomain — show where.
+  // A static (caddy) deployment with build outputs is served by the gateway in
+  // place at its own subdomain — show where.
   const buildOutputs = (deployment.manifest.build as { outputs?: string[] } | undefined)?.outputs
   const servedAt =
-    deployment.behavior === "frontend" && deployment.services.length === 0 && buildOutputs?.length
+    deployment.kind === "static" && buildOutputs?.length
       ? (subdomainUrl(deployment.id) ?? `${deployment.id}.<gateway.domain>`)
       : null
 
@@ -41,7 +41,7 @@ export function ProgramDetailPage() {
         backTo="/programs"
         backLabel="Back to Programs"
         name={deployment.id}
-        behavior={deployment.behavior}
+        kind={deployment.kind}
         stack={deployment.stack}
         source={deployment.source}
       >
@@ -49,8 +49,7 @@ export function ProgramDetailPage() {
           name={deployment.id}
           actions={deployment.actions}
           active={deployment.active}
-          behavior={deployment.behavior}
-          deployedAs={[...deployment.services, ...deployment.jobs]}
+          kind={deployment.kind}
           onOutput={setActionOutput}
         />
       </DetailHeader>
@@ -96,8 +95,8 @@ export function ProgramDetailPage() {
           )}
           {deployment.runner && (
             <>
-              <span className="text-[var(--muted)]">Runner</span>
-              <span>{runnerLabel(deployment.runner)}</span>
+              <span className="text-[var(--muted)]">Launcher</span>
+              <span>{launcherLabel(deployment.runner)}</span>
             </>
           )}
           {deployment.active !== null && (