b3a26d2c

By: Ammar Nanjiani <ammar.nanjiani@gmail.com>

fix(aragorn): give Hermes cron a user systemd scope

Cron ticks but never starts workers: systemd-run --user --scope needs a
user bus, and the Hermes probe needs /bin/true. Proven inside the live
hermes-agent sandbox on 2026-09-09.

Does not restart the gateway (restartIfChanged remains false).