move links, adminSync.ignoreUsers and scrapeTargets under their service's deploy namespace

docs/integrations/matrix.md

@@ -217,7 +217,7 @@ lands on.
 - **Admins the sync didn't make keep admin.** An admin missing from that
   file, `@swarm`, the server user `@conduit:<server_name>`, every agent's
   account, and every user id in
-  `services.hyperhive.swarm.matrix.adminSync.ignoreUsers` are never
+  `services.hyperhive.deploy.swarm-controller.matrixAdminSync.ignoreUsers` are never
   revoked.
 - **The last admin stays.** A revoke that would leave no admin in
   `#admins` besides `@swarm` and the server user isn't sent; the

docs/swarm/ui.md

@@ -945,7 +945,7 @@ the subrequest denies it.
 The swarm UI's header carries a single 🔗 button, visible on every route,
 opening a popover of links to other swarm-wide services. Backed by
 `GET /api/links` (swarm-controller), which serves
-`services.hyperhive.swarm.controller.links` (a `listOf { label, icon, url }`,
+`services.hyperhive.deploy.swarm-controller.links` (a `listOf { label, icon, url }`,
 same shape as the per-agent `services.hyperhive.agent.dashboardLinks`).
 
 Links to swarm services come from swarm-level options, so the list is the