fix(ci): unblock nix flake check after clippy 0.1.95 bump (#1368)

The nixpkgs bump to clippy 0.1.95 / cargo 1.95.0 added + strengthened a
large batch of lints. CI denied ALL warnings (`-D warnings`) against the
`pedantic = warn` workspace lint, so the bump hard-failed `nix flake
check` workspace-wide with zero code changes — and would recur on every
future clippy bump.

Posture fix (the durable part): CI now runs
`-D warnings -A clippy::pedantic`, so the default/correctness/style lints
stay a hard gate while the "extra, opinionated" pedantic group is
advisory only (still `warn` for local `cargo clippy` via the workspace
lints table, just non-blocking in CI). `-A` rather than `-W` so the
group drop doesn't re-enable the specific pedantic lints the workspace
allows (e.g. `must_use_candidate`).

Also fixes the genuine DEFAULT/STYLE lints the bump surfaced across the
workspace (doc_lazy_continuation, collapsible_if, ptr_arg,
match_like_matches_macro, …) via `cargo clippy --fix` + manual stragglers
(`too_many_arguments` #[allow] on the host-config constructors), and
three tests that had rotted while the CI runner was offline (#1221):
- topology::top_level_agents_in_multi_root — hardcoded unsorted expected
- rebuild_queue::depends_on_evicted_dep_counts_as_resolved — needs
  MAX_HISTORY_PER_KIND newer terminals to evict, not one
- coordinator::agent_paths doctest — illustrative pseudo-code, now `ignore`

Validated: clippy + formatting + cargo-test checks all pass.

hive-c0re/src/main.rs

@@ -204,6 +204,12 @@ async fn main() -> Result<()> {
 /// Start the coordinator daemon: open the broker, run migrations, spawn
 /// background tasks (auto-update, vacuums, crash-watcher, reminder-scheduler,
 /// dashboard), then serve the admin socket until a signal arrives.
+#[allow(
+    clippy::too_many_arguments,
+    reason = "the `serve` subcommand's args are the host-level config the daemon \
+              boots from (flakes, ports, pronouns, context-window + resource \
+              limits); they flow straight through to Coordinator::open"
+)]
 async fn cmd_serve(
     hyperhive_flake: String,
     nixpkgs_flake: String,
@@ -268,10 +274,10 @@ async fn cmd_serve(
     // No-op when the core token or forge are absent.
     let webhook_port = dashboard_port;
     tokio::spawn(async move {
-        if let Some(token) = forge::core_token() {
-            if let Err(e) = knowledge::ensure_webhook(&token, webhook_port).await {
-                tracing::warn!(error = ?e, "knowledge: ensure_webhook failed");
-            }
+        if let Some(token) = forge::core_token()
+            && let Err(e) = knowledge::ensure_webhook(&token, webhook_port).await
+        {
+            tracing::warn!(error = ?e, "knowledge: ensure_webhook failed");
         }
     });
     // Knowledge periodic pull: hourly fallback in case the webhook is