drop the hive's push of the legacy core/meta repo

Nothing reads core/meta: builds come from internal/meta. Remove push_meta, ensure_meta_remote, meta_read_access, ensure_repo, the per-agent forge sync that only served them, and the git commit path in meta.rs; remove_permission_files now just deletes the seed files.

hive-c0re/src/lifecycle/git.rs

@@ -125,7 +125,7 @@ pub fn git_command() -> Command {
 /// [`git_command`] carrying HTTP credentials **in its environment**.
 ///
 /// `auth_header` is an `Authorization:` line (see
-/// [`crate::forge::core_auth_header`]) handed to git as `http.extraHeader`
+/// `forge::basic_auth_header`) handed to git as `http.extraHeader`
 /// through `GIT_CONFIG_*`, which git reads exactly like a config file. The
 /// alternative — userinfo in the remote URL — puts the secret in `argv`, and
 /// `/proc/<pid>/cmdline` is world-readable while `/proc/<pid>/environ` is

hive-c0re/src/lifecycle/mod.rs

@@ -9,10 +9,11 @@ mod tests;
 
 #[cfg(test)]
 pub use git::git_update_ref;
+#[cfg(test)]
+pub use git::run_with_deadline;
 pub use git::{
-    FETCH_DEADLINE, GIT_LOCAL_DEADLINE, git, git_authed, git_command, git_command_authed,
-    git_is_ancestor, git_read_tree_reset, git_rev_parse, git_tag, git_update_ref_cas,
-    run_with_deadline,
+    git, git_authed, git_command, git_command_authed, git_is_ancestor, git_read_tree_reset,
+    git_rev_parse, git_tag, git_update_ref_cas,
 };
 pub use host_config::write_dropins;
 pub use setup::{
@@ -372,7 +373,7 @@ fn stop_failed_guards()
 
 /// Leak a per-agent warning `kind`. Agent names are a small, bounded set —
 /// leaking one short string per distinct agent that ever hits a stop
-/// failure is cheap, same reasoning as `forge::static_kind`.
+/// failure is cheap.
 fn static_stop_kind(name: &str) -> &'static str {
     Box::leak(format!("agent_stop_failed_{name}").into_boxed_str())
 }