homepage: link the Pi-hole admin and the Hermes web UI

The admin Infrastructure section carried the retired 'dnsmasq' (probe-only,
no link) — Pi-hole FTL (a dnsmasq fork) replaced it on 2026-08-24. Replace it
with a linked Pi-hole card (pihole.franksdank.cloud, probe 8083 — the 403
basicauth counts as up). The Hermes card was probe-only; add the web UI
client link (hermes.franksdank.cloud). Both probes verified up on Dankclaw.

shared/homepage/services.json

@@ -136,12 +136,12 @@
     "category": "admin",
     "section": "AI",
     "description": "The agent gateway.",
-    "url": "",
+    "url": "http://hermes.franksdank.cloud",
     "docs": "",
     "probe": "127.0.0.1:8787",
     "method": "http",
     "wip": false,
-    "showLink": false
+    "showLink": true
   },
   {
     "name": "Grafana",
@@ -228,16 +228,16 @@
     "showLink": false
   },
   {
-    "name": "dnsmasq",
+    "name": "Pi-hole",
     "category": "admin",
     "section": "Infrastructure",
-    "description": "LAN name resolution.",
-    "url": "",
+    "description": "LAN DNS + ad blocking.",
+    "url": "http://pihole.franksdank.cloud",
     "docs": "",
-    "probe": "127.0.0.1:53",
-    "method": "tcp",
+    "probe": "192.168.0.143:8083",
+    "method": "http",
     "wip": false,
-    "showLink": false
+    "showLink": true
   },
   {
     "name": "Gluetun",