drop the hive's push of the legacy core/meta repo

Nothing reads core/meta: builds come from internal/meta. Remove push_meta, ensure_meta_remote, meta_read_access, ensure_repo, the per-agent forge sync that only served them, and the git commit path in meta.rs; remove_permission_files now just deletes the seed files.

hive-c0re/src/job_queue/exec.rs

@@ -446,11 +446,7 @@ async fn run_rebuild_bookkeeping(coord: &Arc<Coordinator>, name: &str) -> Result
     // The `Rebuilt` manager event is emitted exactly once per agent by the DAG's
     // `EmitRebuilt` tail — emitting ok here and letting a failed tail `Reconcile`
     // add a contradictory !ok would double-report the same rebuild.
-    // Full forge sync on every successful rebuild so the rebuild path is
-    // equivalent to the startup sweep: meta access, the `meta` remote and the
-    // `internal/docs` grant all recover without a hive-c0re restart. (No
-    // matrix step: the swarm mints an agent's matrix account, not this hive.)
-    crate::forge::sync_agent(name, crate::forge::core_token().as_deref()).await;
+
     // No `kick_agent` here any more — reporting from `hive-agent`'s own
     // boot instead avoids the duplicate-restart-message problem this used
     // to cause: the container is still stopped at this point (`swap_update` requires it stopped and