move dashboardPort, claudeCodePackage and extraResourceAttributes to deploy.hive-controller

These three are per-host choices that hive-c0re reads and renders into
its agents, so they belong under the hive controller's deploy namespace
rather than swarm-wide:

- c0re.dashboardPort -> deploy.hive-controller.dashboardPort
- c0re.claudeCodePackage -> deploy.hive-controller.claudeCodePackage
  (the claude-login and review-classifier containers on the same host
  keep following it)
- otel.extraResourceAttributes -> deploy.hive-controller.otel.extraResourceAttributes

The old paths stay as mkRenamedOptionModule aliases, now in deploy.nix
with the namespace's other renames. github.enable and the collector port
stay swarm-wide.

nix/host-modules/hive-c0re/options.nix

@@ -3,29 +3,19 @@
 # `nixosModules.default` wires to its own outputs (they carry no
 # in-module defaults; see ../../../flake.nix). The read-only
 # `servedFrontend` option lives in ./theme.nix with the stylix wiring
-# that computes it. The swarm-wide values the meta-flake render hands
-# every agent are declared here too, under `services.hyperhive.swarm`.
+# that computes it. The hive's own values the meta-flake render hands
+# its agents are declared here too, under
+# `services.hyperhive.deploy.hive-controller`.
 {
   pkgs,
   lib,
   ...
 }:
-let
-  renamedToSwarm =
-    name:
-    lib.mkRenamedOptionModule
-      [ "services" "hyperhive" "c0re" name ]
-      [ "services" "hyperhive" "swarm" name ];
-in
 {
   imports = [
     (lib.mkRemovedOptionModule [ "services" "hyperhive" "c0re" "managerToplevel" ] ''
       Every agent, ruth included, builds from `agentBaseToplevel`. Remove this definition.
     '')
-  ]
-  ++ map renamedToSwarm [
-    "claudeCodePackage"
-    "dashboardPort"
   ];
 
   options.services.hyperhive.c0re = {
@@ -340,19 +330,19 @@ in
     };
   };
 
-  # What every agent in the swarm is handed through the meta-flake render,
-  # whichever hive builds it. Swarm-wide so that no hive's agents differ.
-  options.services.hyperhive.swarm = {
+  # What this hive hands its own agents through the meta-flake render. Per
+  # host, so two hives may set them differently.
+  options.services.hyperhive.deploy.hive-controller = {
     claudeCodePackage = lib.mkOption {
       type = lib.types.nullOr lib.types.package;
       default = null;
       example = lib.literalExpression "inputs.nixpkgs-unstable.legacyPackages.x86_64-linux.claude-code";
       description = ''
-        The `claude-code` build every agent runs, or `null` (the
+        The `claude-code` build every agent on this hive runs, or `null` (the
         default) to leave each agent on the `claude-code` from its own
         nixpkgs — i.e. whatever `c0re.nixpkgsFlake` resolves to.
 
-        This is the one binary the whole swarm is built around, and it
+        This is the one binary the whole hive is built around, and it
         moves fast enough that a release channel routinely trails
         unstable by weeks on it. An agent cannot fix that for itself:
         agents evaluate against the single nixpkgs hive-c0re injects,
@@ -391,7 +381,7 @@ in
     dashboardPort = lib.mkOption {
       type = lib.types.port;
       default = 7000;
-      description = "TCP port every hive's hive-c0re dashboard listens on.";
+      description = "TCP port this hive's hive-c0re dashboard listens on.";
     };
   };
 }