refactor: rename templates to agent.nix/ruth.nix, sweep stale name refs

hive-c0re/src/lifecycle/host_config.rs

@@ -158,7 +158,7 @@ async fn set_nspawn_flags(
     // Claude credentials land at `/home/<agent>/.claude` so the
     // `claude` CLI (which reads `$HOME/.claude`) finds them. The
     // harness service's environment sets `HOME` to the same path
-    // (`agent-base.nix` / `manager.nix`), so no `--setenv` plumbing
+    // (`agent.nix` / `ruth.nix` templates), so no `--setenv` plumbing
     // is needed here — the bind alone is enough.
     let claude_mount = container_claude_mount(agent_name);
 

hive-c0re/src/lifecycle/mod.rs

@@ -169,7 +169,7 @@ pub fn agent_uid_gid(agent_name: &str) -> Option<(u32, u32)> {
 /// uid/gid via [`agent_uid_gid`] and shells out to `std::os::unix::fs::chown`.
 /// Silently no-ops when the container isn't built yet (`None` from
 /// [`agent_uid_gid`]) and logs at debug on chown syscall failure — the
-/// activation script in `harness-base.nix` is the steady-state safety
+/// activation script in the harness user module is the steady-state safety
 /// net. Used by per-agent state writers in `forge` + `matrix` so the
 /// agent can read the file without waiting for the next container
 /// rebuild.