remove the hive-side auto-spawn of ruth and the ruthless option

ruth is created from the swarm dashboard like any agent. An existing ruth container starts at boot through the boot reconcile, like every other agent. A definition of services.hyperhive.ruthless now fails evaluation with a removal message.

docs/agent-lifecycle/persistence.md

@@ -31,9 +31,9 @@ Beyond that:
   restart and rebuild** — only an explicit purge (or a hive
   `--purge`-style host operation, or the agent's own choices) touches
   them.
-- The **root/bootstrap agent is special**: it isn't really destroyable
-  in practice — hive-c0re recreates it automatically on its next
-  startup if it's ever gone.
+- The **root/bootstrap agent has no guard**: destroying ruth is as final as
+  for any agent, and she stays gone until you create her again from the
+  swarm dashboard.
 
 Everything below this point is implementation detail: exact table
 schemas, file layouts, and internal migration mechanics.
@@ -432,11 +432,9 @@ an agent's state. The mechanics, for completeness:
 - `PURG3` wipes `/var/lib/hyperhive/{agents,applied}/<name>/` — the
   union of everything `DESTR0Y` left behind.
 
-`actions::destroy` implements the root/bootstrap agent's specialness as a soft policy
-guard that refuses to destroy it, backstopped by
-`auto_update::ensure_root_agent`, which recreates it on the next
-hive-c0re startup if it's ever absent — so even without the guard,
-destroying it would only be transient.
+`actions::destroy` has no guard for the root/bootstrap agent: it destroys ruth
+like any other agent, and she stays gone until you create her again from the
+swarm dashboard.
 
 ### btrfs subvolumes for `/var/lib/hyperhive/agents/<name>`