refactor: move host configs under hosts/{jupiter,vps}

- git-mv jupiter/ vps/ into hosts/; fix ../ -> ../../ for common/services/secrets
- flake.nix + deploy point at hosts/<config>/
- README structure updated
- verified: jupiter/vps/vbox all eval

hosts/vps/hardware-configuration.nix

@@ -0,0 +1,23 @@
+# PLACEHOLDER — replace on install.
+#
+# disko (disk-config.nix) owns the filesystems, so this file only carries
+# kernel modules + platform. nixos-anywhere regenerates it via:
+#   nixos-generate-config --no-filesystems
+# Keep the imports/kernel-module lines; the virtio modules are pinned in
+# configuration.nix so root mounts even if the generator misses them.
+{ config, lib, pkgs, modulesPath, ... }:
+
+{
+  imports = [ (modulesPath + "/profiles/qemu-guest.nix") ];
+
+  boot.initrd.availableKernelModules = [ "ahci" "xhci_pci" "virtio_pci" "virtio_blk" "sr_mod" ];
+  boot.initrd.kernelModules = [ ];
+  boot.kernelModules = [ ];
+  boot.extraModulePackages = [ ];
+
+  # NO fileSystems here — disko defines "/" and "/boot".
+
+  swapDevices = [ ];
+
+  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
+}