nix: finish the current-behaviour comment sweep in touched files

Rewrite the remaining narration in files the previous commit touched:
"moved"/"sat"/"was REMOVED"/"old default" comments in swarm-bao,
swarm-otel, glue-bao-tls, nats-authelia, swarm-controller, swarm-ui,
swarm-otel-service, swarm-authelia-service, the deploy.nix rename table,
hive-ci, hive-forge/service, hive-tls, hyperhive, swarm-nats, swarm.nix
and a few module-eval fixtures, so each says where a thing is or why it
is so now.

Revert the comment edits inside shell script strings in hive-tls,
swarm-nats and the forge token mint to their previous text, so those
generated units are unchanged. The only unit still changing is
swarm-bao-pki (two comment lines in its script). Refs #3902

nix/host-modules/glue-bao-tls.nix

@@ -228,7 +228,7 @@ in
         # is what OPENS the mint, so it cannot come out of it. A certificate
         # authority that issues the credential admitting you to it is the
         # cycle this file's header exists to keep out — which is exactly why
-        # the swarm-services root moved into the store and this one did not.
+        # the swarm-services root lives in the store and this one does not.
         #
         # Its own CN, not the reader's: the hive's own leaf reads every secret
         # its policy names, while this principal may do one thing — `update`