fix(#2190): replace MANAGER_AGENT fallbacks with "operator" for attribution

- loose_ends.rs: NULL submitter on legacy approval rows → "operator"
- questions.rs: NULL submitter on cancel_loose_end → "operator"
- server.rs: HostRequest::RequestSpawn submitter → "operator"
- dashboard.rs: web-UI spawn submitter → "operator"
- socket_server.rs: submit_init_config with no declared parent → "operator"
- mcp.rs: drop MANAGER_AGENT exception from check_send_allowed; keep <parent> only

hive-ag3nt/src/mcp.rs

@@ -2182,21 +2182,14 @@ const EXTRA_MCP_PATH: &str = "/etc/hyperhive/extra-mcp.json";
 const SEND_ALLOW_PATH: &str = "/etc/hyperhive/send-allow.json";
 
 /// Enforce the per-agent send allow-list. Returns `Ok` when the
-/// recipient is permitted (no list configured, manager always
-/// allowed, or `to` is in the list); returns `Err(refusal)` with a
-/// claude-readable string when blocked — the harness surfaces the
-/// refusal as the tool result so claude knows the message didn't
-/// land and can react (e.g. route via the manager instead).
+/// recipient is permitted (no list configured, `<parent>` sentinel
+/// always allowed, or `to` is in the list); returns `Err(refusal)`
+/// with a claude-readable string when blocked <20><><EFBFBD> the harness surfaces
+/// the refusal as the tool result so claude knows the message didn't
+/// land and can react (e.g. route via `<parent>` instead).
 fn check_send_allowed(to: &str) -> Result<(), String> {
-    if to == hive_sh4re::MANAGER_AGENT {
-        // Always allow agents to talk to the manager — otherwise a
-        // misconfigured allow-list could leave a sub-agent unable
-        // to ask for help.
-        return Ok(());
-    }
     if to == hive_sh4re::PARENT_RECIPIENT {
-        // Always allow `<parent>` — same escape-hatch rationale as
-        // the manager exception. The allow-list constrains peer
+        // Always allow `<parent>` — the allow-list constrains peer
         // chatter, not the structural reporting line; the operator
         // can rewire who the parent IS via `set_parent` without
         // having to remember to update the per-agent allow-list.