fix(systemd): set explicit SyslogIdentifier on hyperhive-declared units

Follow-up to the harness fix: any unit whose ExecStart is a generated
wrapper (a NixOS `script =` block or a writeShellScript) gets its journal
SyslogIdentifier derived from the wrapper's store-path basename — an
opaque, unstable name. Pin an explicit stable identifier on every unit
hyperhive declares.

script/wrapper units (leaked store paths): forgejo-gpg-init,
hive-gateway-self-signed-cert, hive-tls-ca, hive-ci-prefetch,
hyperhive-isolated-dns, tea-login, forge-avatar-sync,
matrix-avatar-sync, hive-dashboard-links.

direct-binary units (basename already sane; explicit for tidiness +
future-proofing): hive-c0re, hive-priv, hive-matrix-daemon,
hive-bash-daemon, weston.

Only changes the displayed line identifier; journalctl -u <unit>
filtering (keys on _SYSTEMD_UNIT) is unaffected.

nix/modules/hive-forge.nix

@@ -364,6 +364,8 @@ in
               Type = "oneshot";
               User = "forgejo";
               Group = "forgejo";
+              # Pin the journal identity (else it's the `script` store-path wrapper).
+              SyslogIdentifier = "forgejo-gpg-init";
             };
             # GNUPGHOME = the keyring forgejo signs from; HOME so
             # `git config --global` lands where the forgejo process reads it.