grant manage_root_agent by stored permission only, not by the name ruth

Permission::default_for and hive-sh4re's MANAGER_AGENT are gone: every
agent with no permissions key holds Permission::DEFAULT, ruth included.
The agent-name parameters that only fed default_for go with it
(permissions::effective, HiveCopy::before_read/after_read and their
callers).

swarm-controller seeds the grant ruth held by name: at start, a declared
ruth whose permissions are unset gets DEFAULT plus manage_root_agent
written into her key, once, logged. A set key is never touched. It is a
one-shot to delete once every swarm has passed it.

The swarm UI setup assistant opens the create form with
manage_root_agent checked, so a new ruth is created with the grant.
permissions_import no longer adds ruth to the import or splits her
default. Docs and help text no longer say ruth holds the grant by
default; swarmctl-cli.md regenerated.

docs/agent-lifecycle/agent-roster.md

@@ -78,9 +78,9 @@ module docs for the exact call chain.
 
 ## Hard-coded manager behaviour
 
-The **manager (`ruth`)** differs from other agents in naming/bootstrap,
-its socket flavour and its default permissions; its prompt, tool
-allow-list and state dirs work as for every other agent.
+The **manager (`ruth`)** differs from other agents in naming/bootstrap
+and its socket flavour; its permissions, prompt, tool allow-list and
+state dirs work as for every other agent.
 
 <!-- vale write-good.Passive = NO -->
 
@@ -97,13 +97,13 @@ allow-list and state dirs work as for every other agent.
   both flavours; matrix, bash and forge don't call it — their
   notifications push a todo on the harness's in-agent socket (see
   [`docs/turn-loop/mcp.md`](../turn-loop/mcp.md#waking-the-agent-from-inside-the-container)).
-- **Storage/mounts** — the manager container gets
+- **Storage/mounts** — the `manage_root_agent` permission, which the swarm
+  UI's setup assistant creates ruth with, gets a container
   `/var/lib/hyperhive/agents` bind-mounted RW at `/agents` (so it can
   manage any agent's state dir — config isn't authored there, since a
   real config change is a PR from a clone), plus RO mounts for
   `/applied` (diff against what's deployed) and `/meta` (system-wide
-  deploy log). That grant is the `manage_root_agent` permission: ruth
-  holds it by default, and any agent holding it gets the same mounts.
+  deploy log). Any agent holding it gets the same mounts.
   The operator dashboard's `POST /api/meta-update` is the only path
   that writes `flake.lock`.
 - **Prompt** — identical for every container: `prompts/system.md`
@@ -115,8 +115,8 @@ allow-list and state dirs work as for every other agent.
   (`filter_role_blocks(SAMPLE, "manager")`).
 - **Tool allow-list** — the MCP tools claude sees come from the agent's
   permissions alone, the same mechanism for every agent
-  ([`docs/turn-loop/mcp.md`](../turn-loop/mcp.md)). Ruth's default
-  permissions add only `manage_root_agent` (`Permission::default_for`).
+  ([`docs/turn-loop/mcp.md`](../turn-loop/mcp.md)). Ruth's permissions
+  are the default plus `manage_root_agent`, stored for her like any grant.
 - **State dirs** — _not_ special-cased: `HYPERHIVE_STATE_DIR` is
 injected uniformly via `systemd.globalEnvironment` for every
 container including the manager, so all token/state paths resolve