chore(deploy): strip infra commentary from asset/ config files

These ship in a public repo; topology narration in nginx, systemd,
firewalld, and env templates is gratuitous. Keep the config terse —
directives speak for themselves.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

asset/systemd/moments-api.service

@@ -1,6 +1,5 @@
 [Unit]
 Description=moments read-only HTTP API
-Documentation=https://git.lair.cafe/grenade/moments
 After=network-online.target
 Wants=network-online.target
 
@@ -13,7 +12,6 @@ ExecStart=/usr/local/bin/moments-api
 Restart=on-failure
 RestartSec=5s
 
-# Hardening
 NoNewPrivileges=true
 ProtectSystem=strict
 ProtectHome=true