docs: suppress reviewed write-good.Passive false positives

133 hits across 38 files, all previously classified during #4548's sweep
and deliberately left un-rewritten (predicate-adjective state/necessity
description, design-intent idiom, structural/type-description idiom,
no-single-actor topology claim, parallel-triple exception, vale
substring-match artifact — see hyperhive#4548's per-PR bodies for the
per-hit reasoning).

Wraps each one in a scoped <!-- vale write-good.Passive = NO/YES -->
pair (the supported mechanism — TokenIgnores has a known offset-drift
bug) rather than a blanket per-file or per-rule silence, so a *new*
passive-voice hit anywhere in these files still fails once the rule
gates CI (next commit). Table/list false positives (docs/swarm/credentials.md's
renewal-table cells) wrap the whole block, not each cell.

Part of #4546.

docs/tools/matrix.md

@@ -53,6 +53,7 @@ room you haven't read yet.
 
 ### Room membership
 
+<!-- vale write-good.Passive = NO -->
 - `invite_user(room, user_id)` — invite `@user:server` into a room
   you're already in; you must have a high enough power level.
   The invitee sees a pending invite and resolves it via
@@ -66,6 +67,7 @@ room you haven't read yet.
   invites (it can reject too).
 - `list_invites()` — rooms this agent has been invited to but not
   yet joined (`{ id, canonical_alias, name }` per room).
+<!-- vale write-good.Passive = YES -->
 
 ### Receipts
 
@@ -73,6 +75,7 @@ room you haven't read yet.
 
 ## Multiple accounts
 
+<!-- vale write-good.Passive = NO -->
 `services.hyperhive.agent.matrixAccounts` (declared in `agent.nix`) is
 the agent's full set of matrix identities — for example an
 external-facing account alongside the internal one — **and, being
@@ -89,6 +92,7 @@ here are the *further* accounts. hive-c0re pins its `tokenFile` to
 `<state>/matrix-token` and provisions it there, and the
 dashboard's link-account route refuses to create an account by that
 name.
+<!-- vale write-good.Passive = YES -->
 
 `main` is present exactly when that URL is non-null, which is the whole
 mechanism behind "accounts are the enable signal": an agent with no