refactor(hive-c0re): group src-root files into submodules

stores/ (sqlite-backed host stores + db helper), stats/, agent_config/,
workers/ — pure git-mv moves; crate-root re-exports keep every
crate::<module> path compiling. flake_check stays at root (synchronous
approval-flow validation, not a background worker)

docs/approvals.md

@@ -413,7 +413,7 @@ tool group can therefore edit, commit, and submit changes for any of
 its direct children directly inside its container at `/agents/<child>/config/`.
 
 Agents holding the `can_manage_top_level_agents` topology role
-(defined as `ROLE_CAN_MANAGE_TOP_LEVEL_AGENTS` in `hive-c0re/src/topology.rs`)
+(defined as `ROLE_CAN_MANAGE_TOP_LEVEL_AGENTS` in `hive-c0re/src/agent_config/topology.rs`)
 get additional host-side bind mounts via `set_nspawn_flags`:
 
 - `/var/lib/hyperhive/agents/` → `/agents/` (RW) — all top-level

docs/coordinator.md

@@ -109,7 +109,7 @@ Notable collapses:
 ### Desired-state (spec vs status)
 
 Per-agent power *intent* — `wanted: Up | Offline` — is durable as the
-`agent_power` table in the coordinator DB (`hive-c0re/src/power.rs`).
+`agent_power` table in the coordinator DB (`hive-c0re/src/stores/power.rs`).
 `container_view` remains the observed *status*; `Reconcile` nodes converge the
 two. Setting `wanted` is never a queued node: the submit layer
 (`job_queue/submit.rs`) writes the row synchronously, then submits the DAG

docs/persistence.md

@@ -47,7 +47,7 @@ header/targets split, and the per-agent power-intent registry:
 - `agent_power` — one tiny row per agent: `agent PK / wanted (up |
   offline) / updated_at` — the durable power *intent* behind the job
   queue's desired-state reconciliation
-  (`docs/coordinator.md::Job queue`; owner: `hive-c0re/src/power.rs`).
+  (`docs/coordinator.md::Job queue`; owner: `hive-c0re/src/stores/power.rs`).
   Written synchronously by every operator/agent power action
   (dashboard start/stop, `hivectl stop`, the MCP kill/start tools,
   spawn approval); read by `Reconcile` nodes and the boot reconcile.