feat: Update web UI for domain-keyed service model

- RegisteredService: removed name, added subdomains bool
- CertEntry: removed service field (domain is the key)
- Ingress page: domain as primary label, subdomains badge
- Certificates page: source shown under domain
- All type-check passes

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

web/src/router/pages/CertificatesPage.tsx

@@ -168,8 +168,7 @@ export function CertificatesPage() {
                     <div className="min-w-0">
                       <div className="font-mono text-sm truncate">{entry.domain}</div>
                       <div className="flex items-center gap-2 mt-0.5">
-                        <span className="text-xs text-muted-foreground">{entry.service}</span>
-                        <span className="text-xs text-muted-foreground">({entry.source})</span>
+                        <span className="text-xs text-muted-foreground">{entry.source}</span>
                       </div>
                     </div>
                     <div className="flex items-center gap-2 shrink-0 ml-4">