agent permissions: one set, tool groups included, set at agent creation

mara on #5170: "dont split caps and perms. its all perms. / dont include
the now empty tool groups / nothing set -> default / also add perms to
agent creation screen".

- hive-sh4re: one `Permission` enum (messaging, meta, inbox, execution,
  web_tools, manage_root_agent) replaces `ToolGroup` and `Capability`;
  `lifecycle`/`forge` are gone. `Permission::default_for` is the default
  for an agent the swarm sets nothing for.
- The record is `{ "permissions": [...] }`. Missing key, unset field or
  no successful read yet = default; `[]` = none; a failed read after a
  good one keeps the last value.
- hive-agent reads its own key every 10s and builds each turn's --tools,
  --allowedTools and MCP config (rewritten before every turn) from it;
  the subagent daemon reads it on each start/continue. Agents get a
  read-only grant on their own key.
- hive-c0re restarts an agent only when its manage_root_agent changes.
  The import now merges meta/capabilities.json and meta/tool-groups.json
  into one list per agent and deletes both; the "import pending, don't
  read" decision is `ImportOutcome::read_allowed`, table-tested.
- swarm-controller: `GET /api/permissions` (names + default) and an
  optional `permissions` on `POST /api/agents`, stored before the job is
  queued. swarm-ui's create-agent form gets a permissions field.
- Deleted: HIVE_TOOL_GROUPS and its forward to the subagent daemon,
  tool_groups.rs, ruth's tool-group seed, the permissions rebuild job
  (PermPayload/WritePermFile/perm_change), the dashboard permissions tab
  and its stale-entries panel.

Part of #5170.

swarmctl/src/main.rs

@@ -291,12 +291,13 @@ enum AgentVerb {
         #[command(subcommand)]
         command: InferenceVerb,
     },
-    /// Show or change the capabilities the swarm grants an agent.
+    /// Show or change the permissions the swarm grants an agent.
     ///
-    /// The hive running the agent reads them every 30 seconds and, when they
-    /// change, restarts the agent after its current turn. Unset leaves the
-    /// agent on its hive's default: none, except `ruth`, who gets
-    /// `manage_root_agent`.
+    /// The agent applies its tool permissions at its next turn; the hive
+    /// running it restarts it, after its current turn, when
+    /// `manage_root_agent` changes. Unset leaves the agent on the default:
+    /// `messaging`, `meta`, `inbox`, `execution`, plus `manage_root_agent`
+    /// for `ruth`.
     Permissions {
         #[command(subcommand)]
         command: PermissionsVerb,
@@ -305,11 +306,11 @@ enum AgentVerb {
 
 #[derive(Subcommand)]
 enum PermissionsVerb {
-    /// Show the capabilities the swarm grants an agent, or that it sets none.
+    /// Show the permissions the swarm grants an agent, or that it sets none.
     Get(InferenceAgentArgs),
-    /// Replace the capabilities the swarm grants an agent.
+    /// Replace the permissions the swarm grants an agent.
     Set(PermissionsSetArgs),
-    /// Clear the agent's permissions, so its hive's default applies again.
+    /// Clear the agent's permissions, so the default applies again.
     Clear(InferenceAgentArgs),
 }
 
@@ -317,15 +318,16 @@ enum PermissionsVerb {
 struct PermissionsSetArgs {
     /// Agent name. A hive must declare it.
     agent: String,
-    /// The capabilities to grant, comma-separated (`manage_root_agent`).
-    /// `--capabilities ''` grants none.
+    /// The permissions to grant, comma-separated: any of `messaging`,
+    /// `meta`, `inbox`, `execution`, `web_tools`, `manage_root_agent`.
+    /// `--permissions ''` grants none.
     #[arg(
         long,
-        value_name = "CAPABILITIES",
+        value_name = "PERMISSIONS",
         value_delimiter = ',',
         required = true
     )]
-    capabilities: Vec<String>,
+    permissions: Vec<String>,
     #[command(flatten)]
     socket: ControllerSocketArg,
 }
@@ -716,7 +718,7 @@ fn permissions(remote: &RemoteArgs, command: PermissionsVerb) -> Result<()> {
     match command {
         PermissionsVerb::Get(a) => permissions::get(&a.socket.resolve(remote)?, &a.agent),
         PermissionsVerb::Set(a) => {
-            permissions::set(&a.socket.resolve(remote)?, &a.agent, a.capabilities)
+            permissions::set(&a.socket.resolve(remote)?, &a.agent, a.permissions)
         }
         PermissionsVerb::Clear(a) => permissions::clear(&a.socket.resolve(remote)?, &a.agent),
     }