docs: scrub self-ref cookies across 5 files (#719 batch 2)

All five files scrubbed to 0 issue-ref cookies. Most refs were
'(closes #NNN)' style attribution after closed work landed.

- docs/turn-loop.md: 6 → 0 (#598 unified binary, #419 auth-fail,
  #542 mtime resumption, #519 role markers, #442 spawn path,
  #474/#478 partial edit)
- docs/approvals.md: 5 → 0 (#317 flake validation, #250 withdraw,
  #441 rebuild-queue dispatch, #753 manager port hash, #425
  crash-watch grace)
- docs/terminal-rendering.md: 2 → 0 (#666 ask-operator inline)
- docs/conventions.md: 3 → 0 (#753 port hash, #692 parent
  sentinel, #486 reparenting)
- docs/security.md: 4 → 0 (#240 + #658 ×2 + #673/#678 attribution)

Combined with PR #810 (docs/web-ui.md 14→0), this PR closes the
small / medium files. Remaining: agent-hierarchy.md (13),
gotchas.md (13), persistence.md (13). gateway.md is atlas's lane.

docs/turn-loop.md

@@ -6,8 +6,8 @@ claude has access to in return.
 ## The loop
 
 Each agent harness (`hive serve`, with role picked from `$HIVE_ROLE`
-— `"agent"` for sub-agents, `"manager"` for the manager; post-#598
-this is one binary not two) runs:
+— `"agent"` for sub-agents, `"manager"` for the manager — one
+binary, not two) runs:
 
 1. Long-poll `Recv` on its socket. The host-side broker
    (`broker.rs::recv_blocking_batch`) returns immediately if there's
@@ -31,8 +31,8 @@ this is one binary not two) runs:
    (`Bus::emit_status("rate_limited")`), sleeps
    `HIVE_RATE_LIMIT_SLEEP_SECS` (default 300), then retries.
    The dashboard and per-agent page show a `⊘ rate limited` badge
-   while the harness is parked. **Auth-failed detection** (closes
-   #419): both stdout and stderr pumps also match
+   while the harness is parked. **Auth-failed detection**: both
+   stdout and stderr pumps also match
    `AUTH_FAIL_MARKERS` (`"authentication_failed"`, `401`, etc.).
    On match the harness writes `{state_dir}/hyperhive-needs-login`,
    emits `needs_login_idle` status, requeues the inflight message
@@ -40,7 +40,7 @@ this is one binary not two) runs:
    the same path used at boot. The operator re-authenticates via
    the per-agent web UI login flow; on success the sentinel is
    cleared and the queued message drives the next turn normally.
-   **Mtime-snapshot resumption** (closes #542): `wait_for_login`
+   **Mtime-snapshot resumption**: `wait_for_login`
    snapshots the `~/.claude/` dir (newest file mtime + file count)
    at entry and only resumes when that snapshot advances — not
    just when credentials exist on disk. This prevents a silent
@@ -176,8 +176,8 @@ socket at `/run/hive/` once at startup:
 - `claude-system-prompt.md` — rendered from
   `hive-ag3nt/prompts/system.md` by `hive_ag3nt::prompt::render`:
   HTML-comment markers (`<!-- role:agent -->...<!-- /role:agent -->`,
-  same for `role:manager`) gate the role-specific blocks (closes
-  #519); everything else is shared. Five placeholders are then
+  same for `role:manager`) gate the role-specific blocks; everything
+  else is shared. Five placeholders are then
   substituted: `{label}` (short agent name), `{qualified_label}`
   (hive-qualified `name@domain` form), `{operator_pronouns}`,
   `{hive_identity}` (e.g. `` on hive `pr1ma` ``; empty when
@@ -350,10 +350,9 @@ meta's.
   `agent.nix`, commits the changes, and calls `request_apply_commit`
   with the commit sha — the first ApplyCommit on a freshly-init'd
   config creates the container. Fails if a proposed repo for this
-  name already exists. (The pre-#442 path through a separate
-  manager-side `request_spawn` was removed; operator can still
-  direct-spawn an empty agent from the dashboard's `◆ R3QU3ST SP4WN`
-  button which routes via `HostRequest::RequestSpawn`.)
+  name already exists. (The operator can also direct-spawn an empty
+  agent from the dashboard's `◆ R3QU3ST SP4WN` button, which routes
+  via `HostRequest::RequestSpawn`.)
 - `kill(name)` — graceful stop. No approval required.
 - `start(name)` — start a stopped sub-agent. No approval.
 - `restart(name)` — stop + start. No approval.
@@ -398,7 +397,7 @@ meta's.
   approval (use `remind` for unapproved self-wake). Long downtime
   fires once per recurring row on resume (catch-up clamp).
 - `edit_schedule(id, body?, description?, interval_seconds?, next_fire_at_unix?, targets_add?, targets_remove?)` —
-  partial-update a schedule (#474/#478). Pass only the fields to
+  partial-update a schedule. Pass only the fields to
   change; absent fields are left alone. `targets_add` / `targets_remove`
   mutate the recipient list in the same transaction; re-adding a
   previously-cancelled target drops its tombstone + history (fresh