feat(#1184): make agent CPU quota and memory limit configurable

hive-c0re/src/coordinator.rs

@@ -81,6 +81,11 @@ pub struct Coordinator {
     /// compaction / auto-reset watermarks and exposes the active value
     /// on `/api/state` as `context_window_tokens`.
     pub context_window_tokens: std::collections::HashMap<String, u64>,
+    /// Per-agent systemd `CPUQuota=` value (e.g. `"200%"`). Written into
+    /// the `container@h-<name>.service.d/` drop-in on every spawn/rebuild.
+    pub agent_cpu_quota: String,
+    /// Per-agent systemd `MemoryMax=` value (e.g. `"4G"`). Same drop-in.
+    pub agent_memory_max: String,
     agents: Mutex<HashMap<String, AgentSocket>>,
     /// Agents whose lifecycle action (currently just spawn) is in flight.
     /// Read by the dashboard to render a spinner; cleared when the action
@@ -228,6 +233,8 @@ impl Coordinator {
         dashboard_port: u16,
         operator_pronouns: String,
         context_window_tokens: std::collections::HashMap<String, u64>,
+        agent_cpu_quota: String,
+        agent_memory_max: String,
     ) -> Result<Self> {
         let broker = Broker::open(db_path).context("open broker")?;
         let approvals = Approvals::open(db_path).context("open approvals")?;
@@ -261,6 +268,8 @@ impl Coordinator {
             dashboard_port,
             operator_pronouns,
             context_window_tokens,
+            agent_cpu_quota,
+            agent_memory_max,
             agents: Mutex::new(HashMap::new()),
             transient: Mutex::new(HashMap::new()),
             recent_transient: Mutex::new(HashMap::new()),