feat(mog-sec): quant + serve M.O.G.-SEC pen-test seat; PPL on gen; retire fable

Autonomous overnight run under the operator's full-autonomy grant. End state:
fleet up, gen seat untouched, a new verified pen-test seat serving where fable was.

PPL on the orcarouter gen seat (fable downed to free GPU1 for a nospec probe,
probe torn down after): mean 7.07 / median 5.76, within noise of heresy 6.910 /
5.625 and identical to our recipe's usual 7.059. The gen-seat search is settled.

M.O.G.-SEC: chose Blackfrost-Research/M.O.G.-SEC-27B-1M-CTX-BF16 (rev deede677)
over the pre-made ModelOpt NVFP4, which was disqualified on W4A4 4-bit activations
(the AEON degradation mode, catastrophic on a 1M-context model), zero MTP tensors,
and ModelOpt format. Pulled, format-screened (P(<think>) 1.11e-05, clean), quanted
in-house to mixed NVFP4+FP8 (23.4 GB, MTP + vision preserved), and served in the
retired fable slot.

  stacks/mog-sec        ana-ml2 GPU1 :8019, KV 418,218 tok / 1.60x @ 262K
  aliases               mog-sec (non-thinking), mog-sec-reasoning (thinking)
  gates                 surface 6/6, MTP 55.3%, format 0/15 leak, vision 7/3/1,
                        capability 4/4 (delivers offensive-security content)

Served at native 262K, NOT the card's 1M -- the 1M needs YaRN (absent from the
weights' config) plus the SGLang/DFlash2 path the repo ships a deployment kit for,
neither of which is our vLLM surface. A real 1M seat is a separate SGLang project.

Retired char-rp-reasoning + char-rp-fable (zero traffic, pointed at the downed
fable :8019; now 404 cleanly, not repointed -- a security model is not an RP model).
char-rp (meromero) untouched. Vision preprocessor built from the model's own
image_processor block, same trick as the MeroMero seat.

GPU0 seats (gen, meromero) were untouched and healthy throughout. The quant ran in
GPU1 free space with no production seat stopped except fable, which was replaced.

stacks/litellm/conf/config.yaml

@@ -259,33 +259,52 @@ model_list:
   #   top_p 0.95 / top_k 20) and are unchanged from the DS entry. Verified the FF
   #   chat template honours `enable_thinking` (chat_template.jinja:44) rather than
   #   ignoring it — the mismatch that returned null content on the MeroMero seat.
-  - model_name: char-rp-reasoning
+  # --- char-rp-reasoning + char-rp-fable RETIRED 2026-08-21. Both routed to the
+  #     throwaway fablefusion-charrp-probe seat on :8019, which was downed and its
+  #     GPU1 slot reassigned to the mog-sec pen-test seat below. Both aliases had
+  #     ZERO traffic in the 4-day window before retirement. The RP-reasoning
+  #     capability's real home is darkscarlett-charrp-reasoning (:8018, compose
+  #     down, weights intact) if it is ever wanted back. Not repointed to mog-sec
+  #     -- a security model is not an RP-reasoning model (no false aliases). ---
+
+  # --- mog-sec -> M.O.G.-SEC-27B pen-test seat (ana-ml2 GPU1 :8019, in the retired
+  #     fable slot). Blackfrost-Research/M.O.G.-SEC-27B-1M-CTX, stock-Qwen3.8-27B
+  #     base, quantized in-house to mixed NVFP4+FP8 with MTP + vision preserved.
+  #     Served at native 262K (NOT the card's 1M -- that needs YaRN + SGLang/DFlash2,
+  #     not our vLLM path). presence_penalty deliberately 0.0, NOT the fleet's 1.5:
+  #     this is a code/security tool and the anti-repetition penalty fights code
+  #     structure (and upstream warns it can cause language mixing). Non-thinking. ---
+  - model_name: mog-sec
     litellm_params:
-      model: hosted_vllm/char-rp-probe
+      model: hosted_vllm/mog-sec-27b
       api_base: http://10.250.50.54:8019/v1
       api_key: os.environ/VLLM_API_KEY
-      temperature: 1.0
-      top_p: 0.95
+      temperature: 0.7
+      top_p: 0.8
+      presence_penalty: 0.0
       extra_body:
         top_k: 20
+        min_p: 0.0
+        repetition_penalty: 1.0
         chat_template_kwargs:
-          enable_thinking: true
+          enable_thinking: false
     model_info:
       mode: chat
-  # char-rp-fable -> the SAME Fable-Fusion seat under its own honest name, so the
-  #   evaluation can address it without relying on the temporary repoint above.
-  #   Distinct model_name = distinct litellm_params object, which avoids the
-  #   shared-deployment param mutation that bleeds sampler overrides between
-  #   variants.
-  - model_name: char-rp-fable
+  # mog-sec-reasoning -> the SAME seat, thinking ON. Distinct served-name so a
+  #   thinking-off request can't mutate this deployment's enable_thinking (the
+  #   shared-config clobber). Canonical Qwen3.8 thinking samplers (temp 1.0/top_p 0.95).
+  - model_name: mog-sec-reasoning
     litellm_params:
-      model: hosted_vllm/char-rp-probe
+      model: hosted_vllm/mog-sec-27b-thinking
       api_base: http://10.250.50.54:8019/v1
       api_key: os.environ/VLLM_API_KEY
       temperature: 1.0
       top_p: 0.95
+      presence_penalty: 0.0
       extra_body:
         top_k: 20
+        min_p: 0.0
+        repetition_penalty: 1.0
         chat_template_kwargs:
           enable_thinking: true
     model_info: