dankclaw: standardize gitea/authentik/hermes data roots under /home/dank/Containers

Repoint Volume=/EnvironmentFile= in the 8 affected quadlet units to the
caddy-established Containers/<svc> layout: gitea (data, postgres, env),
authentik (data, postgres), hermes (data, webui checkout). Data-root mv on the
target happens at deploy time before each group's unit restart; same-fs rename,
instantly reversible. Running containers keep their inode-bound binds until the
unit restart flips them to the new path.

dankclaw/hermes/quadlet/hermes-dashboard.container

@@ -19,7 +19,7 @@ Pull=never
 Network=dankclaw_default
 Environment=HERMES_DATA_DIR=/data
 Environment=HERMES_HOME=/data
-Volume=/home/dank/hermes-data:/data
+Volume=/home/dank/Containers/hermes/data:/data
 PublishPort=9119:9119
 Exec=bash -c 'hermes dashboard --host 0.0.0.0 --port 9119 --no-open --skip-build'