12c60e30

By: ananjiani <ananjiani@noreply.codeberg.org>

fix(hermes): pin upstream package with state holders (#301)

## Fix

Pin only Hermes to the earliest checked upstream revision that packages hermes_state_holders. The installed module is missing at the old pin, so both the Telegram gateway and dashboard crash on import.

- Old: 593aa74c6182ce2e5e23bc102daaaae71710c05d
- New: eaf10c7e7890c069392d50b797c09026d0a28bca
- Upstream fix: https://github.com/NousResearch/hermes-agent/commit/eaf10c7e7890c069392d50b797c09026d0a28bca
- The fix adds hermes_state_holders to setuptools py-modules. Upstream Nix packaging files are unchanged.
- Changes: flake.nix pin/comment and only the hermes-agent lock node. No unrelated inputs or service settings changed.

## Local checks: passed

- Targeted Aragorn Nix eval resolves both service entry points to the tested package.
- Targeted local package build with --builders ""; no full host or flake checks.
- Isolated installed imports: hermes_state_holders, hermes_state, gateway.run, platforms.telegram.adapter, hermes_cli.main, hermes_cli.main_dashboard, hermes_cli.web_server.
- Isolated CLI checks: hermes gateway --help; hermes gateway run --help; hermes dashboard --help; hermes dashboard --status.
- Package: /nix/store/mzq542s16lmjl0z2vdm5d5dsvfwqd65w-hermes-agent-0.21.0
- Wheel: /nix/store/si9ql27xsxd2mm3i644sy5pk7wn702jg-hermes-agent-0.21.0
- Targeted pre-commit and commit/push hooks passed; git diff --check passed.

## Independent review: PASS

GPT-5.6 Sol independently checked the Grok 4.6 implementation, upstream ancestry, diff scope, actual Aragorn package wiring, targeted build, and installed imports/help commands. No blockers found.

## Limits and risk

- Draft until required buildbot/nix-build succeeds. Known Buildbot evaluation issue tracked separately in #300; no bypass or CI fix in this PR.
- The earliest corrected upstream revision is 4,258 commits ahead of the old pin and changes at least 300 upstream files. Broader runtime behavior is not fully tested.
- The explicit revision keeps future lock refreshes on this tested Hermes package.
- No live credentials, Telegram connection/polling, service restart, merge, or deployment. This PR does not fix the separate memory-pressure event.

Co-authored-by: Ammar Nanjiani <ammar.nanjiani@gmail.com>
Reviewed-on: https://codeberg.org/ananjiani/infra/pulls/301