add deployment.targetPort option

Fixes #155
This should default to `head config.services.openssh.ports`.