refactor: Align vocabulary — component → program / deployment

Canonical terms (see docs/registry.md glossary):
- program: any catalog entry (tool/daemon/frontend) — the software
- service / job: how a program is deployed (systemd .service / .timer)
- deployment: umbrella for the unified service+job+program view

Changes:
- core: ServiceSpec/JobSpec component: → program: (component accepted as
  back-compat validation_alias); DeployedComponent → Deployment.
- api: ComponentSummary/Detail → DeploymentSummary/Detail; GET /components
  → /deployments; GatewayRoute.component → program; GatewayInfo
  .component_count → deployment_count; ServiceActionResponse/action keys
  component → program.
- app: matching type renames, /components → /deployments hook, route
  /component/:name → /deployment/:name, GatewayRoute.program.
- docs: component-registry.md → registry.md (+ canonical glossary);
  CLAUDE.md endpoint list refreshed (drop removed /tools, add typed
  program/service/job + config routes).

Tests: core 92, cli 24, api 52 green; app build clean; ruff clean.

core/tests/test_units.py

@@ -76,7 +76,7 @@ class TestUnitExpansion:
         assert svc.expose.http.health_path == "/health"
         assert svc.proxy.caddy.path_prefix == "/my-svc"
         assert svc.manage.systemd is not None
-        assert svc.component == "my-svc"
+        assert svc.program == "my-svc"
 
     def test_tool_creates_program_only(self, units_root: Path) -> None:
         config = load_config(units_root)
@@ -108,7 +108,7 @@ class TestUnitExpansion:
         assert job.run.runner == "command"
         assert job.run.argv == ["my-job", "run"]
         assert job.defaults.env["DATA_DIR"] == "/tmp/data"
-        assert job.component == "my-job"
+        assert job.program == "my-job"
 
     def test_service_without_path_prefix(self, tmp_path: Path) -> None:
         config_data = {