hive-matrix-mcp: quieter retries, unique snapshot tmp file, accurate comments

Audit follow-ups on the secondary-account retry.

The accounts snapshot is written by the heartbeat task and, now, by the
retry loop. Both used one fixed tmp path, so concurrent writers could
clobber it or fail the rename. Each write now names its own tmp file
(pid + counter); a test hammers it from four threads.

A permanently bad secondary logged three warnings per attempt, every 16
minutes, for as long as the daemon ran. DownAccounts::failed now reports
whether a failure is news (first, or a different reason from the last);
only that is a warning, repeats are debug. The two per-attempt warnings
in client.rs and credential.rs are covered by that line, which names the
reason, so the store-token one drops to debug.

The comments in client.rs and a credential.rs test, and persistence.md,
still described the old skip-until-restart behaviour or implied that a
store-listed account without a credential is retried here; that case is
handled by the linked-name set changing, not by this loop.

docs/agent-lifecycle/persistence.md

@@ -596,7 +596,8 @@ exited. A running daemon re-lists its linked accounts in the store
 every two minutes and, when the set changed, exits with status
 75, which the unit's `RestartForceExitStatus` restarts. On the same
 two-minute tick it tries again each secondary account that didn't come
-up — no token yet, a token the homeserver rejected, or a homeserver that
+up — a declared account with no token yet, a token the homeserver
+rejected, or a homeserver that
 was down — waiting two minutes after its first failure and twice as long
 after each further one, up to sixteen minutes. One that comes up joins
 the running daemon; the primary and the other accounts aren't