Trim comments across configs and services

Shorten verbose multi-paragraph comments to essentials, and drop a
stale claim in common.nix that jupiter kept its own copy of the base
config (it now imports common.nix directly).

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

services/cinephage.nix

@@ -1,14 +1,12 @@
 { config, ... }:
 
 # Cinephage — indexer search + streaming/library manager. Runs the official
-# container image, not upstream's nix flake module: their flake's
-# npmDepsHash is stale against their own package-lock.json (fixed-output
-# hash mismatch), and past that, a transitive dep's postinstall hard-enforces
-# pnpm (`only-allow pnpm`), which fails under nix's network-sandboxed npm
-# build regardless. Docker is their actually-maintained deployment path.
-# Paired sops secret in hosts/jupiter/secrets.nix — BETTER_AUTH_SECRET signs
-# sessions/encrypts stored API keys; losing it invalidates all sessions and
-# makes saved keys unrecoverable, so it must be static, not app-generated.
+# container image, not upstream's nix flake module: its npmDepsHash is stale
+# against its own package-lock.json, and a transitive dep hard-enforces pnpm,
+# breaking the nix-sandboxed npm build regardless. Docker is the actually-
+# maintained path. BETTER_AUTH_SECRET (paired sops secret in
+# hosts/jupiter/secrets.nix) signs sessions/encrypts stored API keys — must
+# be static, not app-generated, or losing it invalidates everything.
 {
   virtualisation.oci-containers.containers.cinephage = {
     image = "ghcr.io/moldytaint/cinephage:latest";