docs: repoint agent-tier option paths to services.hyperhive.agent.*

Refs #4479

docs/web-ui/agent.md

@@ -33,7 +33,7 @@ structurally rather than for one specific trigger. Two columns:
   the parent flex container open via `align-items: stretch`-driven
   height feedback. Falls back to the dimmed hyperhive mark
   (`/favicon.svg`) on load error (`/icon` 404s when the agent has no
-  `hyperhive.icon` override — there is no server-side default image).
+  `services.hyperhive.agent.icon` override — there is no server-side default image).
 - **Main column** (`.agent-header-main`, `Header.tsx`): two rows —
   title (`◆ <label> ◆`) and, when set, the "swarm / hive" identity
   line. Nothing else lives here; both rows are short, fixed-shape text
@@ -73,7 +73,7 @@ structurally rather than for one specific trigger. Two columns:
     (back-link to the host dashboard, `${dashboardBase}dashboard.html`)
     followed by this agent's `agent_links()`-sourced navigation (stats,
     screen when VNC is enabled, forge profile + config-repo mirror when
-    the agent has a forge account, any `hyperhive.dashboardLinks`
+    the agent has a forge account, any `services.hyperhive.agent.dashboardLinks`
     extras) — all as real `<a>` elements, not a `Dropdown`-style
     command list, so ctrl/middle-click and "copy link address" keep
     working. Each `AgentLink.kind` resolves differently: `container` →
@@ -348,7 +348,7 @@ shaped).
   `Snapshot` consumed by the `/stats` page. `all` ranges from the
   earliest recorded turn with an adaptive bucket width.
 - `GET /icon` — agent's icon as `image/svg+xml`. Returns
-  `/etc/hyperhive/icon.svg` (set via `hyperhive.icon` in `agent.nix`)
+  `/etc/hyperhive/icon.svg` (set via `services.hyperhive.agent.icon` in `agent.nix`)
   when present, otherwise **404** — there is no server-side default.
   Consumers (dashboard container row, this page's own header icon)
   hit `/icon` optimistically and fall back client-side on load failure
@@ -358,7 +358,7 @@ shaped).
   renderer — deliberately thin, just enough to display the
   desktop + forward pointer + keyboard. A production-grade viewer
   would vendor noVNC; this file ships the minimal in-tree variant).
-  Only accessible when `hyperhive.gui.enable = true` in the agent's
+  Only accessible when `services.hyperhive.agent.gui.enable = true` in the agent's
   `agent.nix`; the harness shows a 🖥 screen link in the state row
   when `gui_vnc_port` is present. A `← agent` back-link in the page
   header returns to the main per-agent page. Controls: `⤢ fit` CSS-downscales
@@ -380,9 +380,9 @@ shaped).
   frames to the weston VNC server at `127.0.0.1:<vnc_port>`.
   Transparent to any RFB variant. VNC port comes from the
   `HIVE_GUI_VNC_PORT` env var (a fixed port set on the harness
-  service when `hyperhive.gui.enable`; see `weston-vnc.nix`).
+  service when `services.hyperhive.agent.gui.enable`; see `weston-vnc.nix`).
 - `GET|POST /extra/<name>/…` — **extra web proxies** declared via
-  `hyperhive.extraWebProxies` in `agent.nix` (serialised to the
+  `services.hyperhive.agent.extraWebProxies` in `agent.nix` (serialised to the
   `HIVE_EXTRA_WEB_PROXIES` env var as a JSON object
   `{"<name>": "<upstream_url>"}`). Each entry mounts a transparent
   reverse-proxy at `/extra/<name>/` that forwards every request (method,

docs/web-ui/shape.md

@@ -11,7 +11,7 @@
   pointed at `HIVE_STATIC_DIR` — that fallback serves anything not
   matched by an API or action route from the dist. Dashboard dist lives at
   `${frontend}/dashboard`; per-agent dist is the merged
-  `hyperhive.frontend.mergedDist` (default agent dist + per-agent
+  `services.hyperhive.agent.frontend.mergedDist` (default agent dist + per-agent
   `extraFiles` overlay).
 - `GET /static/*` → bundled CSS + JS produced by esbuild
   (`frontend/packages/{dashboard,agent}/build.mjs`). Both pages