operator pronouns: configurable free-text, threaded into prompts

new NixOS module option services.hive-c0re.operatorPronouns
(free text, default 'she/her', example 'they/them'). hive-c0re
takes it as a CLI flag (--operator-pronouns, lib.escapeShellArg'd
in the systemd unit), stores it on Coordinator, threads it into
the meta flake's mkAgent so each agent's systemd service gets
HIVE_OPERATOR_PRONOUNS set. the harness reads the env at boot
and substitutes {operator_pronouns} into the agent / manager
system prompt alongside {label}. nix string is escaped against
backslash + double-quote so non-ascii / quoted values
round-trip safely. prompt addendum: both agent.md and
manager.md mention the operator's pronouns up front so claude
uses them naturally in third-person reference. propagates on
next ↻ R3BU1LD (meta lock bump, no per-agent approval).

hive-c0re/src/main.rs

@@ -49,6 +49,11 @@ enum Cmd {
         /// Dashboard HTTP port.
         #[arg(long, default_value_t = 7000)]
         dashboard_port: u16,
+        /// Operator pronouns (free text). Threaded into each
+        /// container's harness via `HIVE_OPERATOR_PRONOUNS` so the
+        /// system prompt can mention them. Default: `she/her`.
+        #[arg(long, default_value = "she/her")]
+        operator_pronouns: String,
     },
     /// Spawn a new agent container directly (`hive-agent-<name>`). Bypasses
     /// the approval queue — use only as an operator on the host. For
@@ -95,8 +100,14 @@ async fn main() -> Result<()> {
             hyperhive_flake,
             db,
             dashboard_port,
+            operator_pronouns,
         } => {
-            let coord = Arc::new(Coordinator::open(&db, hyperhive_flake, dashboard_port)?);
+            let coord = Arc::new(Coordinator::open(
+                &db,
+                hyperhive_flake,
+                dashboard_port,
+                operator_pronouns,
+            )?);
             manager_server::start(coord.clone())?;
             // Idempotent pre-flight: rewrite pre-meta-layout applied
             // repos, ensure proposed repos carry the `applied`