docs: suppress reviewed write-good.Passive false positives

133 hits across 38 files, all previously classified during #4548's sweep
and deliberately left un-rewritten (predicate-adjective state/necessity
description, design-intent idiom, structural/type-description idiom,
no-single-actor topology claim, parallel-triple exception, vale
substring-match artifact — see hyperhive#4548's per-PR bodies for the
per-hit reasoning).

Wraps each one in a scoped <!-- vale write-good.Passive = NO/YES -->
pair (the supported mechanism — TokenIgnores has a known offset-drift
bug) rather than a blanket per-file or per-rule silence, so a *new*
passive-voice hit anywhere in these files still fails once the rule
gates CI (next commit). Table/list false positives (docs/swarm/credentials.md's
renewal-table cells) wrap the whole block, not each cell.

Part of #4546.

docs/web-ui/agent.md

@@ -27,6 +27,7 @@ moment any row of badges/pills wrapped onto an extra line at some
 viewport width; measuring instead of guessing closes that bug class
 structurally rather than for one specific trigger. Two columns:
 
+<!-- vale write-good.Passive = NO -->
 - **Agent icon** (`<img class="agent-icon">`): fixed-size square
   identity anchor — `width: 5em; height: 5em` with explicit pixel
   sizing so the `<img>`'s intrinsic (large) dimensions don't push
@@ -100,6 +101,7 @@ structurally rather than for one specific trigger. Two columns:
   - No header cancel-turn button any more — `/cancel` (slash command,
     below) is the only path; the turn-loop state badge already shows
     `thinking` as the discoverability cue.
+<!-- vale write-good.Passive = YES -->
 
 Values throughout come from `GET /api/state`'s cold-load snapshot,
 kept in sync afterwards by the SSE stream (see Live view below) —
@@ -113,6 +115,7 @@ so two tabs from different hives are distinguishable; the header's own
 **Main content** (`<main class="agent-main">`): fills the viewport
 and scrolls behind the fixed header + footer.
 
+<!-- vale write-good.Passive = NO -->
 - `#status` overlay: empty when online; shows the login form / OAuth
   URL when `status` is `needs_login_*`. The OAuth code input is
   `type="password"` with a `👁 reveal` toggle that flips it back to
@@ -135,6 +138,7 @@ and scrolls behind the fixed header + footer.
   composites above the composer. Geometry is unchanged —
   `.agent-main` and `.terminal-wrap` both `inset: 0` fill the same
   area.
+<!-- vale write-good.Passive = YES -->
 
 ## Footer / composer