feat(menu): Recovery scopes (#111), System IA (#105), drop Control Center (#110)

System is Connectivity / Devices / Recovery / Preferences under the same
six-entry root. Recovery lists desktop (HM), system boot, and BTRFS files
once each with cost labels. Control Center is gone: blur/gaps live in Look
& Feel; update checks and Bluetooth/Printing package toggles in Preferences
(with rebuilds). docs/RECOVERY paths updated.

modules/nixos/services.nix

@@ -8,7 +8,7 @@
 let
   cfg = config.nomarchy.services;
 
-  # Control Center's Printing toggle writes settings.printing.enable; read it
+  # Menu Preferences › Printing writes settings.printing.enable; read it
   # from the state file, the only place it exists on the NixOS side (the
   # hardware.nix/timezone.nix bridge). Missing/invalid JSON fails closed via
   # state-read.nix rather than a raw stack. null = key absent, which
@@ -88,7 +88,7 @@ in
       `services.ollama.acceleration` natively for GPU offload'';
 
     # default stays a plain `false` here; the state bridge is a mkDefault
-    # below, from settings.printing.enable (Control Center's Printing
+    # below, from settings.printing.enable (menu Preferences › Printing
     # toggle) — see ROADMAP § state bridges (#116) for why the old read of
     # `config.nomarchy.settings` never worked.
     printing.enable = lib.mkEnableOption ''