docs: stop writing repo-doc pointers as relative links rustdoc cannot resolve

Eleven doc comments pointed at `docs/` files as markdown links. Ten of
them render as broken hyperlinks in the docs rustdoc CI builds, and
nothing in the tree can tell.

Rustdoc renders a page at `target/doc/<crate>/<module…>/`, so a relative
link resolves against that directory and not against the source file it
was typed in. Every one of these except the single crate-root `//!` was
written for a reader resolving from the source tree, which is one `../`
short at module level and two short one directory deeper.

Two measurements on a throwaway crate, same build and same
`RUSTDOCFLAGS="-D rustdoc::all"`:

  * a bogus intra-doc link `[`no_such_item`]` is a hard error, so the
    `docs-rustdoc` check in nix/checks.nix works for its class;
  * a relative link to a nonexistent file in the same comment produces
    no diagnostic at all and lands in the html verbatim as
    href="../../../docs/does-not-exist.md".

So the class is invisible to the one gate whose stated purpose is to
stop a doc pointer dangling — and it is worse than the plain-text
failure that gate's comment describes, because a broken href still
looks clickable.

Fixing the depths was the other option and is rejected: the correct
depth is a function of how deeply the module is nested, so any module
move silently breaks it again, and no check we have would notice.

The link text was already the canonical pointer — `docs/x.md::Section`,
the same repo-root-relative form used everywhere else in the tree and
the form scripts/check-doc-refs.sh gates. Dropping the `[…](…)` wrapper
keeps every byte of information a reader uses and removes the only part
that was ever wrong.

Refs #3926.

hive-agent/src/web_ui/auth.rs

@@ -79,7 +79,7 @@ pub(super) async fn post_login_cancel(State(state): State<AppState>) -> Response
 /// The turn loop's next iteration parks into `wait_for_login` which
 /// resumes when a fresh credentials file appears via `/login/code`.
 /// Always returns 200 with a body describing what happened. See
-/// [`docs/web-ui/agent.md::Per-agent endpoints`](../../../docs/web-ui/agent.md)
+/// `docs/web-ui/agent.md::Per-agent endpoints`
 /// (the `/api/logout` bullet) for the three-step rationale +
 /// preservation invariants.
 pub(super) async fn post_logout(State(state): State<AppState>) -> Response {

hive-agent/src/web_ui/mod.rs

@@ -71,8 +71,8 @@ struct AppState {
 ///
 /// `HIVE_WEB_SOCKET` opt-in selects unix-socket vs TCP binding; the
 /// dual-mode transition + gateway-side consumer live in
-/// [`docs/web-ui/shape.md::Listener bind`](../../../docs/web-ui/shape.md) and
-/// [`docs/networking/gateway.md::Per-agent unix-socket upstream`](../../../docs/networking/gateway.md).
+/// `docs/web-ui/shape.md::Listener bind` and
+/// `docs/networking/gateway.md::Per-agent unix-socket upstream`.
 ///
 /// # Errors
 ///
@@ -176,7 +176,7 @@ pub async fn serve(
 /// to ask.
 ///
 /// Marker-gating + the gateway-side consumer: see
-/// [`docs/networking/gateway.md::Per-agent unix-socket upstream`](../../../docs/networking/gateway.md).
+/// `docs/networking/gateway.md::Per-agent unix-socket upstream`.
 fn bind_unix(path: &Path) -> Result<tokio::net::UnixListener> {
     use std::os::unix::fs::PermissionsExt;
     if let Some(parent) = path.parent() {
@@ -216,7 +216,7 @@ const MAX_BIND_ATTEMPTS: u32 = 12;
 /// not an unbounded wait).
 ///
 /// Retry rationale + dashboard-banner-on-real-collision:
-/// see [`docs/web-ui/shape.md::Listener bind`](../../../docs/web-ui/shape.md).
+/// see `docs/web-ui/shape.md::Listener bind`.
 async fn bind_with_retry(addr: SocketAddr, label: &str) -> Result<tokio::net::TcpListener> {
     let mut delay_ms = 250u64;
     let mut attempts = 0u32;

hive-agent/src/web_ui/state.rs

@@ -317,7 +317,7 @@ fn read_own_status() -> (Option<String>, Option<i64>) {
 /// for `External`; the frontend resolves each against its `kind`
 /// against the right base so the backend never has to guess the
 /// operator's browser host. See
-/// [`docs/web-ui/dashboard.md::Container row`](../../../docs/web-ui/dashboard.md) for
+/// `docs/web-ui/dashboard.md::Container row` for
 /// the resolver + how `deployed:<sha>` ships alongside.
 ///
 /// Icons are real emoji, not unicode arrow/geometric glyphs — mara: