fix(#3529): create agent config repos in agent-configs, not agents

WIP — compiles per an earlier build, but the verifying build/test run was
cut short by a graceful stop. Re-run gate.sh before pushing.

The controller created every agent config repo, its collaborator entry,
its branch protection and its seeded agent.nix/flake.nix in the agents
org. Config repos live in agent-configs, which is where hive-c0re
reconciles, merges and mirrors them — so a repo created in agents is
invisible to all of those, and nothing errors, because both orgs exist
and both accept a repo.

Root cause was a doc comment asserting something false: AGENTS_ORG
claimed to be the same org hive-c0re uses for its config-repo path. It is
not — hive-c0re's agents org is the namespace repos an AGENT ASKS FOR
land in, and its config repos use agent-configs. The whole flow inherited
the wrong premise from that sentence.

The merge gate survives the move: hive-c0re provisions the operators team
in both orgs, with a comment recording that missing the agent-configs
copy once left every config repo unprotected.

swarm-controller/src/main.rs

@@ -56,7 +56,7 @@ mod webhook;
 enum SwarmNodeKind {
     /// Ensure `agent` exists as an authelia subject at the swarm level.
     CreateIdentity { agent: String },
-    /// Create the agent's repo in `forge::AGENTS_ORG` with the operator
+    /// Create the agent's repo in `forge::CONFIG_ORG` with the operator
     /// merge gate on its default branch. See `forge::Client::create_repo`.
     CreateRepo { agent: String },
     /// Add `agent` as a write collaborator on its own repo. See
@@ -555,7 +555,7 @@ async fn get_hives_status(
 }
 
 /// Body of `POST /api/agents` — the agent name to create, and the hive the
-/// creation is aimed at. The repo name inside `forge::AGENTS_ORG` is the
+/// creation is aimed at. The repo name inside `forge::CONFIG_ORG` is the
 /// same string as `name`: one repo per agent, named after it, same
 /// convention `hive-c0re::forge` already uses for its own single-hive
 /// `CreateRepo` path.