refactor(#2464): rename hive-ag3nt crate to hive-agent, collapse lib into main

hive-agent/Cargo.toml

@@ -0,0 +1,41 @@
+[package]
+name = "hive-agent"
+edition.workspace = true
+version.workspace = true
+
+[lints]
+workspace = true
+
+[dependencies]
+anyhow.workspace = true
+axum.workspace = true
+reqwest.workspace = true
+hyper.workspace = true
+hyper-util.workspace = true
+http-body-util.workspace = true
+forgejo-api.workspace = true
+url.workspace = true
+time.workspace = true
+futures-util = "0.3"
+clap.workspace = true
+hive-claude.workspace = true
+hive-sh4re.workspace = true
+rmcp.workspace = true
+rusqlite.workspace = true
+schemars.workspace = true
+serde.workspace = true
+serde_json.workspace = true
+tokio.workspace = true
+tokio-stream.workspace = true
+tower-http.workspace = true
+tracing.workspace = true
+tracing-subscriber.workspace = true
+
+[dev-dependencies]
+tempfile = "3"
+
+# Single harness serve-loop binary: `hive-agent` (from `src/main.rs`).
+# The sibling MCP server + external wake CLI are their own bin crates
+# now (`hive-agent-mcp`, `hive-agent-wake`). Privilege boundary is
+# enforced server-side at the socket (tool groups / manager surface).
+# See `docs/turn-loop.md::Harness binary shape`.