move dashboardPort, claudeCodePackage and extraResourceAttributes to deploy.hive-controller

These three are per-host choices that hive-c0re reads and renders into
its agents, so they belong under the hive controller's deploy namespace
rather than swarm-wide:

- c0re.dashboardPort -> deploy.hive-controller.dashboardPort
- c0re.claudeCodePackage -> deploy.hive-controller.claudeCodePackage
  (the claude-login and review-classifier containers on the same host
  keep following it)
- otel.extraResourceAttributes -> deploy.hive-controller.otel.extraResourceAttributes

The old paths stay as mkRenamedOptionModule aliases, now in deploy.nix
with the namespace's other renames. github.enable and the collector port
stay swarm-wide.

nix/host-modules/swarm-review-classifier.nix

@@ -24,12 +24,12 @@ let
   hyperhiveCfg = config.services.hyperhive;
 
   # The `claude-code` the agents run, so this container does not trail them on
-  # the CLI; `fallback`, the container's own nixpkgs', only where the swarm pins
+  # the CLI; `fallback`, the container's own nixpkgs', only where this host pins
   # none.
   claudeCode =
     fallback:
-    if hyperhiveCfg.swarm.claudeCodePackage != null then
-      hyperhiveCfg.swarm.claudeCodePackage
+    if hyperhiveCfg.deploy.hive-controller.claudeCodePackage != null then
+      hyperhiveCfg.deploy.hive-controller.claudeCodePackage
     else
       fallback;
   cfg = hyperhiveCfg.deploy.review-classifier;