docs(web-ui): address review

- hivectl/README.md: split matrix.rs/github.rs into accurate per-module
  lines (matrix.rs invites a matrix user to the hive Space/room,
  cli.rs:289-296; it is not per-agent). Fixed the summary line's
  'provisioning verbs' to name the actual verb groups left after the
  facts pass.
- web-ui/README.md: the swarm/ui.md pointer no longer promises roster/
  creating-agents/linking-accounts content that page doesn't have.
- Reverted the unrelated doesn't/does not drive-by at hivectl/README.md:5.

docs/web-ui/README.md

@@ -1,8 +1,7 @@
 # Dashboard & Web UI
 
 The per-hive dashboard: approvals, container state and the rebuild
-queue for one hive. For swarm-wide day to day — the agent roster,
-creating agents, linking accounts — see
+queue for one hive. For swarm-wide day to day, see
 [the swarm UI](../swarm/ui.md) instead. If you want implementation
 detail — wire formats, DOM structure, event plumbing — see [Dashboard
 layout](dashboard.md), [Per-agent page](agent.md), [Shape](shape.md),

hivectl/README.md

@@ -2,10 +2,10 @@
 
 The operator-facing host CLI. A thin client for the `hive-c0re`
 daemon — speaks the host admin socket protocol (`hive-host-sock`) and
-doesn't link the daemon crate. Container lifecycle, the approval
-queue, and provisioning verbs all forward to the daemon and need it
-running; a few (`wg`/`peer-config`, `choom`) work off local host state
-instead.
+does not link the daemon crate. Container lifecycle, the approval
+queue, and the matrix/github/gateway verbs all forward to the daemon
+and need it running; a few (`wg`/`peer-config`, `choom`) work off local
+host state instead.
 
 ## When to use it
 
@@ -29,8 +29,8 @@ dispatch:
   container.
 - **`forge.rs`** — reconciles an agent's config against its forge
   repo.
-- **`matrix.rs`**, **`github.rs`** — per-agent matrix invites and
-  GitHub PAT writes.
+- **`matrix.rs`** — invite a matrix user to the hive Space or a room.
+- **`github.rs`** — per-agent GitHub PAT writes (`set-token`).
 - **`gateway.rs`** — gateway Basic-auth user management (htpasswd).
 - **`wg.rs`** — WireGuard mesh helpers.
 - **`subvol.rs`** — btrfs state-subvolume ops.