Reorganize services/ into category subfolders

Group service modules by category (media, network, vpn, identity,
dev, desktop) to make the growing services/ dir easier to navigate.
containers.nix stays at the top level since it's a shared backend,
not a single-category service.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

services/media/clonarr.nix

@@ -0,0 +1,28 @@
+{ ... }:
+
+# Clonarr — visual TRaSH-Guides sync tool for Radarr/Sonarr (quality
+# profiles, custom formats, scores). No nixpkgs package; runs the official
+# container image (ghcr.io/prophetse7en/clonarr).
+{
+  virtualisation.oci-containers.containers.clonarr = {
+    image = "ghcr.io/prophetse7en/clonarr:latest";
+    autoStart = true;
+    # Host networking: clonarr needs to reach Radarr/Sonarr/Prowlarr on
+    # jupiter's own localhost (native systemd services, not containers) —
+    # bridge-mode "localhost" would be the container's own netns, not the host's.
+    extraOptions = [ "--network=host" ];
+    volumes = [
+      "/mnt/data/AppData/clonarr:/config"
+    ];
+    environment = {
+      TZ = "Europe/Berlin";
+      PUID = "1000";
+      PGID = "100";   # darman:users
+      PORT = "6060";
+    };
+  };
+
+  systemd.tmpfiles.rules = [
+    "d /mnt/data/AppData/clonarr 0755 darman users -"
+  ];
+}