squid: base allow list for every authed user, and no start limit on the list reload

docs/networking/network.md

@@ -289,6 +289,18 @@ host. It never decrypts TLS, so it holds no signing key. It caches nothing.
   restricted. Agents must not start sending credentials until every hive runs
   the `hive-c0re` that writes it, or a legacy agent loses general internet.
 
+- **Base list.** `services.hyperhive.squid.baseAllowedDomains` is open to every
+  authenticated user, whatever its flag: what the agent harness needs off the
+  swarm. The default is the hosts Claude Code requires
+  (<https://code.claude.com/docs/en/network-config>): `api.anthropic.com` for
+  the model API and the usage probe (`hive-agent/src/claude_usage_watch.rs`),
+  `claude.ai` for the account login, and `platform.claude.com` for the OAuth
+  token exchange and refresh. An agent whose `ANTHROPIC_BASE_URL` or ACP
+  provider points elsewhere needs that host added to the option: the value
+  sits in the agent's own environment file, which the host doesn't read. The
+  list omits the plugin marketplace clone from `github.com`, since a failed add
+  isn't fatal. The rules below still refuse an entry that resolves to a
+  private address.
 - **Allow-list.** `services.hyperhive.squid.allowedDomains` defaults to empty,
   plus the self-check canary (`services.hyperhive.squid.selfcheck.canary`), so
   the canary widens the restricted list by that one name. The swarm's own