docs: add tool_groups, limits, flake_check to CLAUDE.md file map

CLAUDE.md

@@ -130,6 +130,17 @@ hive-c0re/         host daemon + sibling operator CLI (lib + 2 bins)
                          read). Reconciled by `meta::sync_agents`;
                          operator/manager edits land via the
                          eventual write API.
+  src/tool_groups.rs    per-agent tool-group config — reads/writes
+                         `/var/lib/hyperhive/meta/tool-groups.json`;
+                         `set_groups` + `groups_for` + `remove_agent`.
+                         Wired into `render_flake` for `HIVE_TOOL_GROUPS`
+                         injection; operator write via dashboard action.
+  src/limits.rs         wire-protocol size limits (inline body cap,
+                         reminder spill threshold) shared across agent
+                         + manager sockets. Single source of truth.
+  src/flake_check.rs    pre-apply `flake.lock` validation — rejects
+                         proposals missing `inputs.<X>.follows` wiring
+                         (duplicate `original` node check).
   src/forge.rs          optional Forgejo wiring: per-agent users +
                          tokens, the `agent-configs` org (`push_config`),
                          and meta read access; mirrors each applied repo
@@ -384,3 +395,4 @@ The docs below own the details — this section just points at them.
 - **Two-step spawn, approval flow, flake.lock validation:** →
   [`docs/approvals.md`](docs/approvals.md).
 
+