hive: author as the hanthor-hive-agent App on the tuna-os spokes - #372

What

On the three tuna-os spokes (reef, school, hub):

• set github.app_slug: hanthor-hive-agent
• set github.app_authored_prs: true
• clear project.ai_author

Why

• Reply loop: the spokes set app_id: 3942065 but no app_slug, so hive used the public default hivecommons-hive[bot]. It never recognised its own hanthor-hive-agent[bot] comments, treated its own unpark replies as unanswered, and replied again every sweep. Tavern#299, corral#607, corral#634 and bluefin-cli#295 each got 320+ copies of one reply, 40-58 a day.
• Ignored commands: with ai_author: hanthor, hive treats @hanthor as itself, so /hive decision, /hive approve and /fixed from @hanthor are refused.
• Agent authorship: with ai_author empty and app_authored_prs: true, EffectiveAIAuthor() returns hanthor-hive-agent[bot], so agents author as the App.
• Slug check: gh api apps/hanthor-hive-agent returns id 3942065, owner tuna-os.

The code fix for the loop is proposed upstream in hivecommons/hive#17512. This config change stops the loop without waiting for that release.

Apply to the running spokes (this file alone does nothing)

The ConfigMap is only a seed. Each hive restores /data/hive.yaml.runtime over it on restart. So for each namespace (hive-reef, hive, hive-hub):

ns=hive-reef   # then: hive, hive-hub
kubectl -n "$ns" exec deploy/hive -- cat /data/hive.yaml.runtime > "/tmp/$ns.runtime.bak"
# In /data/hive.yaml.runtime, make the same three edits as this PR:
#   project.ai_author: ""
#   github.app_slug: hanthor-hive-agent
#   github.app_authored_prs: true
# (dashboard settings, or kubectl cp out, edit, kubectl cp back)
kubectl apply -f talos-k8s/hive/spokes/<spoke>/manifest.yaml
kubectl -n "$ns" rollout restart deploy/hive

Expected effect and trade-off

• Loop stops: the new-comment count for the day on the four issues above stops growing after one sweep.
• Commands work: /hive commands from @hanthor are acted on.
• Older PRs: agent PRs opened earlier under the hanthor account no longer count as the hive's own, so fix loops and the duplicate-PR guard ignore them. Accepted trade-off.