publish operators' forge-profile pronouns to kv and list them in the agent prompt

swarm-controller reads each member of authelia's operator group's forge
profile every five minutes and keeps one key per operator in the new
operator-profiles bucket. Every agent may list and read that bucket, and
hive-agent renders it into the system prompt at harness start, falling
back to today's prompt when the bucket is empty or doesn't answer within
five seconds.

Fixes #5383

nix/host-modules/hive-options-removed.nix

@@ -3,7 +3,8 @@
 #
 # A definition of any of them is ignored and produces a warning, so a host
 # that still sets one keeps evaluating. The agents' system prompt
-# (hive-agent/prompts/system.md) names no pronouns for the operator, the
+# (hive-agent/prompts/system.md) takes each operator's pronouns from their
+# forge profile, the
 # harness (hive-agent/src/harness_state.rs) holds the per-model context
 # windows it uses until a turn reports the model's own, every OTEL exporter
 # exports every 60 seconds (claude at its SDK default, the rest by a fixed
@@ -44,9 +45,8 @@ in
 
   config.warnings =
     removed "c0re.operatorPronouns" cfg.c0re.operatorPronouns ''
-      agents' system prompts name no pronouns for the operator and say "the
-      operator". Pronouns will come from a per-operator profile setting, which
-      is an open hyperhive forge issue.
+      agents' system prompts take each operator's pronouns from the Pronouns
+      field of that operator's forge profile.
     ''
     ++ removed "c0re.contextWindowTokens" cfg.c0re.contextWindowTokens ''
       the agent harness uses the context window the model reports after each

nix/host-modules/swarm-nats.nix

@@ -905,6 +905,9 @@ in
                 # the harness and the subagent daemon read the tool permissions
                 # it holds.
                 "--agent-token-publish-subject ${lib.escapeShellArg "\$\$JS.API.DIRECT.GET.KV_agent-permissions.\$\$KV.agent-permissions.{agent}"}"
+                # Every agent also reads the whole `operator-profiles` bucket.
+                # That grant names no agent, so the responder adds it itself
+                # (`swarm-nats-auth`'s `Policy::agent_token_permissions`).
                 "--store-cert-role ${lib.escapeShellArg authCertRole}"
               ];
               # The store identity arrives by `LoadCredential` and is named