hive-sh4re, docs: fix the two docs argus flagged on ToolGroup::Execution

addresses review on #4245

hive-sh4re/src/permissions.rs

@@ -34,7 +34,11 @@ pub enum ToolGroup {
     /// now that agents can't create them directly). Opt-in per
     /// agent so the operator controls who can spin up repos.
     Forge,
-    /// `run`, `status` (via `mcp__bash__*`)
+    /// Gates whether the `bash` MCP server (`mcp__bash__run`/`status`/
+    /// `kill`) is rendered into the agent's config at all — see
+    /// `extra_server_required_group` in `hive-agent/src/mcp_config.rs`.
+    /// `tools()` returns `&[]`: this isn't a `mcp__hyperhive__*`
+    /// allowlist entry, the gate lives at config-render time instead.
     Execution,
     /// Claude built-in web egress tools: `WebFetch` (retrieve a URL) and
     /// `WebSearch` (search the web). Both are omitted from `--tools` by