ci(#1555): prose-ify legacy tracker tags; add lint:allow escape hatch

Clean the legacy backlog so the tracker-tag lint can become a required
gate (mara's warn-during-cleanup -> full-tree-enforcement path). Rewrite
the ~33 real `closes/see #NNN` provenance refs in doc-comments to prose
across hive-forge, hive-c0re, hive-ag3nt, hive-matrix-mcp, hive-sh4re,
and add a `lint:allow` line marker to check-issue-refs.sh for genuine
non-tracker `#<digits>` (a hash-digit heading-detection test input).
Tree is now lint-clean; tracker-tag lint ready to promote to required.

hive-c0re/src/agent_server.rs

@@ -841,7 +841,7 @@ pub(crate) fn handle_send(
     let resolved = crate::topology::resolve_recipient(agent, to);
     // Validate that the resolved recipient is a known local agent or the
     // special "operator" recipient. Without this check a typo in `to`
-    // silently queues a message nobody will ever read (issue #1165).
+    // silently queues a message nobody will ever read.
     //
     // Cross-hive messaging (`name@hive` qualified names) is not routed
     // through the broker — use the Matrix MCP tools for that instead.

hive-c0re/src/broker.rs

@@ -347,7 +347,7 @@ impl Broker {
     }
 
     /// Unacknowledged messages addressed to `recipient`, newest-first.
-    /// Backs the dashboard's operator inbox (#1469): the operator never
+    /// Backs the dashboard's operator inbox: the operator never
     /// `recv`s over an agent socket, so messages to `"operator"` sit in
     /// the broker with `acked_at IS NULL` until the operator hits "mark
     /// all read" (which calls [`Broker::mark_all_read`]). This read
@@ -1352,7 +1352,7 @@ mod tests {
         assert_eq!(broker.ack_turn("b").unwrap(), 5);
     }
 
-    /// The #1462 fix: a transient `ping` fired while no `recv` is parked
+    /// Transient-wake regression guard: a `ping` fired while no `recv` is parked
     /// must NOT be lost — it's buffered and drained by the next collect.
     #[test]
     fn transient_ping_buffered_when_no_receiver_parked() {

hive-c0re/src/dashboard.rs

@@ -1221,8 +1221,8 @@ pub(crate) fn emit_meta_inputs_snapshot(coord: &Coordinator) {
     });
 }
 
-/// Unread operator-directed messages for the dashboard's Y3R C4LL inbox
-/// (#1469). Returns messages addressed to `"operator"` that haven't been
+/// Unread operator-directed messages for the dashboard's Y3R C4LL inbox.
+/// Returns messages addressed to `"operator"` that haven't been
 /// acked yet (the operator clears them via the existing
 /// `POST /api/agent/operator/mark-all-read`). Newest-first; path-shaped
 /// tokens are validated so the client renders file links like the

hive-c0re/src/lifecycle.rs

@@ -1145,7 +1145,7 @@ async fn set_nspawn_flags(
     // Make /shared writable by every agent. Containers share host uids (no
     // PrivateUsers), but each agent is a distinct unix user, so a root-owned
     // 0755 dir leaves them unable to write — the documented "read/write for
-    // all agents" contract was broken (#1374). A setgid group would need a
+    // all agents" contract was broken. A setgid group would need a
     // pinned GID declared in every container plus all agent users joined to
     // it (cross-container coordination + a rebuild cascade); instead we use
     // the /tmp model — sticky world-writable (1777). The sticky bit lets any

hive-c0re/src/rebuild_queue.rs

@@ -1224,7 +1224,7 @@ mod tests {
             kind: QueueKind::Rebuild,
             agent: "agent-a".to_owned(),
             source: QueueSource::Approval,
-            reason: "approval #42 apply commit".to_owned(),
+            reason: "approval 42 apply commit".to_owned(),
             parent_id: None,
             inputs: Vec::new(),
             approval_id: Some(42),