deploy: rename swarm.enableRequiredServices to deploy.allSwarmServices

Both halves of the old name were wrong about the subject. The services
are required of the SWARM, not of the host, and the option says whether
THIS host runs them — so it described the wrong thing and sat in the
namespace that has to be identical on every host. The new name is mara's
own phrasing of what it means: "deploy all swarm level services on this
host".

mkRenamedOptionModule carries existing configs, read-side references
included, so this warns rather than failing to evaluate.

Three sites were not just the identifier:

- local-defaults.nix set it inside `config.services.hyperhive.swarm =
  { … }`. It moves out as a path beside the other deploy.* setter rather
  than into a second `deploy = { … }` attrset — the warning that file
  already carries about `swarm` applies to any second definition of the
  same parent.
- swarm-required-services.nix bound only `swarmCfg`, now unused; it binds
  and reads `deployCfg`.
- Two comments in that file described a half-migrated state, where the
  switch asserted some `swarm.*.enable` toggles and some `deploy.*` ones.
  Every one of them has been `deploy.*` for several slices now.

nix/host-modules/swarm-authelia.nix

@@ -6,7 +6,7 @@
 #   - the CLIENT pointer (`url`) exists on every hive, because a hive
 #     that doesn't run authelia still has to know where to send people.
 #   - the CONTAINER only exists where the swarm's shared services live.
-#     `swarm.enableRequiredServices` asserts this module's `enable`
+#     `deploy.allSwarmServices` asserts this module's `enable`
 #     (see ./swarm-required-services.nix); a hive is a client by default.
 #
 # Operator and agents are both subjects of the same provider,
@@ -992,7 +992,7 @@ in
     #
     # Gated on the collector's `enable` as well, and that second condition is
     # what makes the loopback address honest. Both services default from
-    # `swarm.enableRequiredServices` — but `mkDefault` is an invitation to
+    # `deploy.allSwarmServices` — but `mkDefault` is an invitation to
     # override, not a guarantee, so "they are on the same host" is a property
     # of the auto-deployed topology rather than of the module. Without this
     # gate, a host running authelia and no collector would declare a target