fixup: remove issue tags from code, use plain prose

nix/modules/hive-c0re.nix

@@ -53,7 +53,7 @@ in
       message if it's missing. Exposed to agents as
       `HYPERHIVE_HIVE_DOMAIN`; consumed by
       `hive-ag3nt::identity::hive_domain()` for `<name>@<domain>`
-      qualified labels (#589).
+      qualified labels.
     '';
   };
 
@@ -86,7 +86,7 @@ in
     description = ''
       Human-readable name of the wider swarm this hive belongs to.
       Hives at different DNS domains can share a swarm name when
-      they federate together (#589). Exposed to agents as
+      they federate together. Exposed to agents as
       `HYPERHIVE_SWARM_NAME`; surfaced in the dashboard chrome and
       per-agent system prompt when set.
     '';
@@ -97,7 +97,7 @@ in
   # `HYPERHIVE_PEERS` into the hive-c0re service and forwarded to agent
   # containers via `meta.rs::FORWARDED_VARS`. Consumed by
   # `identity.rs::peers()` + the dashboard's `peer_hives` state field
-  # (feeds iris's P33RS tab). See #589.
+  # (feeds the P33RS dashboard tab).
   options.services.hyperhive.peers = lib.mkOption {
     type = lib.types.attrsOf (lib.types.submodule {
       options = {
@@ -118,7 +118,7 @@ in
             Optional path to a PEM cert/bundle to trust for this peer's
             TLS. Null = system CA bundle (for Let's Encrypt peers). Set
             to the peer's self-signed cert for `selfSignedTls = true`
-            peers. See #594.
+            peers. Forward-compat slot; not yet used in v0.
           '';
         };
       };
@@ -132,8 +132,8 @@ in
       Peer hives in the same swarm. The attrset key is a short label
       used in dashboard links and log messages -- it does not need to
       match the remote hive's `hiveName`. Null `tlsCertFile` uses the
-      system CA bundle; set it for self-signed TLS peers (#594 slot,
-      unimplemented in v0).
+      system CA bundle; set it for self-signed TLS peers (forward-compat
+      slot, not yet used in v0).
     '';
   };