docs: fix 329 Microsoft.Contractions hits with proper safety checks

Apply contraction fixes across ~40 doc files (setup, integrations, lifecycle,
networking, scheduler, swarm, tools, trust-boundary, UI, etc.). Skipped 14 hits:
- 10 where words appear in ALL CAPS for deliberate emphasis (is NOT, do NOT, etc.)
- 4 where text could not be safely located due to markdown formatting or column position

Applied via systematic scan with checks for fenced code blocks, inline code spans,
and intentional caps. Preserves sentence-initial capitalization throughout.

docs/tools/hivectl.md

@@ -50,7 +50,7 @@ hivectl forge reconcile-config iris --verbose      # include the full diff, not
 - `reconcile-config <agent>` shows the divergence between the agent's local
   applied config checkout and its forge `agent-configs/<agent>` `main`, then
   reconciles. `--from forge` resets the local checkout to forge `main` (takes
-  effect on the next deploy — it does not auto-rebuild). `--from local` is not
+  effect on the next deploy — it doesn't auto-rebuild). `--from local` isn't
   supported yet (forge `main` is core-only branch-protected; resolve via a
   config PR). With no `--from` it prompts for the direction after the diff.
 
@@ -126,7 +126,7 @@ hivectl gateway list-users                          # list all usernames, one pe
 ```
 
 Passwords are hashed with BCrypt (cost 12) by the daemon. The file is
-created if it does not exist. Re-running `create-user` with the same
+created if it doesn't exist. Re-running `create-user` with the same
 username updates the password hash in place.
 
 ## Agents