refactor(#2352): extract standalone hivectl crate, hive-c0re daemon-only

CLAUDE.md

@@ -25,13 +25,19 @@ hand-maintained per-file tree drifts out of sync with the code.
 ### Rust workspace (`Cargo.toml` members)
 
 - **`hive-c0re/`** — host daemon (runs as the unprivileged `hive-core`
-  user) plus two operator CLIs. `src/main.rs` is the `hive-c0re` binary
-  (serve / spawn / kill / rebuild / approve / destroy / periodic vacuum
-  loops); `src/bin/hivectl.rs` is the ad-hoc operator admin CLI. Owns
-  the sqlite broker, approval + question + reminder + schedule queues,
-  the meta flake, lifecycle (`nixos-container` shellouts), gateway /
-  forge / matrix provisioning, per-container stats, and the axum
-  operator dashboard (`dashboard.rs`). Largest crate.
+  user). `src/main.rs` is the `hive-c0re` binary — **daemon-only**
+  (`serve` + the periodic vacuum/sweep loops); the operator CLI lives in
+  the separate `hivectl` crate, which talks to the daemon over the host
+  admin socket. Owns the sqlite broker, approval + question + reminder +
+  schedule queues, the meta flake, lifecycle (`nixos-container`
+  shellouts), gateway / forge / matrix provisioning, per-container stats,
+  and the axum operator dashboard (`dashboard.rs`). Largest crate.
+- **`hivectl/`** — standalone operator CLI (`hivectl` binary). Talks to
+  the `hive-c0re` daemon over the host admin socket (`hive-host-sock`
+  wire types) — does NOT link `hive-c0re`. Verbs: `agents <spawn|kill|
+  destroy|rebuild|restart|list|set-parent|…>`, `approvals <pending|
+  approve|deny>`, `forge`/`matrix`/`github`/`gateway` provisioning,
+  `choom`, `stop`/`start`, `wg`/`peer-config`.
 - **`hive-ag3nt/`** — in-container harness; three sibling binaries for
   every agent (`hive-agent` serve loop, `hive-agent-mcp`,
   `hive-agent-wake`). Turn-loop *policy* layer (`turn.rs`) over the `hive-claude`