Reorganize services/ into category subfolders

Group service modules by category (media, network, vpn, identity,
dev, desktop) to make the growing services/ dir easier to navigate.
containers.nix stays at the top level since it's a shared backend,
not a single-category service.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

services/media/seerr.nix

@@ -0,0 +1,23 @@
+{ ... }:
+
+# Seerr (formerly Jellyseerr) — request manager for Jellyfin, talks to
+# Sonarr/Radarr to fulfill requests. Fresh install, no migrated data.
+#
+# configDir stays at the module default; bind-mount AppData onto it instead
+# of overriding configDir, so data lives on the RAID array and survives an
+# OS-disk reinstall (same DynamicUser/StateDirectory issue as prowlarr.nix —
+# see that file for why, and why the mount targets /var/lib/private/seerr
+# rather than the public path).
+{
+  services.seerr.enable = true;
+
+  fileSystems."/var/lib/private/seerr" = {
+    device = "/mnt/data/AppData/seerr";
+    fsType = "none";
+    options = [ "bind" ];
+  };
+
+  systemd.tmpfiles.rules = [
+    "d /mnt/data/AppData/seerr 0755 darman users -"
+  ];
+}