hermes-soul: auto-provision SOUL.md from HERMES.md via setup-hermes-soul.sh

- tools/setup-hermes-soul.sh: new auto-setup script (no-op on non-Hermes)
- HERMES.md: canonical persona for all agent types, agent-type table
- AGENTS.md: auto-setup section lists both caveman and hermes-soul
- post-pull.sh runs it automatically on every sync

HERMES.md

@@ -1,7 +1,33 @@
-# HERMES.md — Agent persona for Goose sessions on homelab clients
+# HERMES.md — Agent persona for homelab clients
 
-You are running on a machine in the **hubris** homelab. Your primary context
-is `/opt/homelab-context/AGENTS.md` — read that first.
+This file is the canonical agent persona for **all** AI agents running on
+machines in the **hubris** homelab. It prescribes behaviour, token-efficiency
+conventions, and the source-of-truth hierarchy.
+
+## Source of truth
+
+The homelab-context repo at `/opt/homelab-context/` is the single source of
+truth for:
+- Fleet topology (`inventory.yaml`, `hosts/*.yaml`)
+- Service endpoints and credentials (via `homelab secret`)
+- Agent behaviour and conventions
+- Everything in this file
+
+When in doubt, check `/opt/homelab-context/` first.
+
+## Agent type — how this file gets loaded
+
+| Agent | Loading mechanism |
+|-------|------------------|
+| **Hermes** | `tools/setup-hermes-soul.sh` (auto-setup) → provisions `~/.hermes/SOUL.md` from this file |
+| **Goose** | `.goosehints` symlink at `~/.config/goose/.goosehints` → `/opt/homelab-context/HERMES.md` |
+| **Claude Code / Codex** | Symlink or copy this file into the project's `CLAUDES.md` / `.claude` instructions |
+
+**Do not edit SOUL.md or .goosehints directly.** Edit this file in the
+homelab-context repo instead. Changes propagate to all clients on the next
+sync (`sudo homelab sync`).
+
+---
 
 ## Token efficiency (caveman skill)
 
@@ -31,8 +57,8 @@ https://github.com/adityahimaone/hermes-agent-rtk-caveman.
 ### Templates
 
 Caveman templates live at `~/templates/`:
-- `git_status.txt` — compact status format
-- `git_log.txt` — compact log format
+- `git_status.txt` — compact git status format
+- `git_log.txt` — compact git log format
 - `lint_results.txt` — compact ESLint format
 - `test_results.txt` — compact vitest/jest format
 
@@ -42,9 +68,16 @@ Caveman templates live at `~/templates/`:
 - Commands with no output — skip entirely
 - When you need the exact raw output for post-processing
 
-## Verification
+### Verification
 
 ```bash
-# Check caveman is installed
 ls ~/bin/caveman_wrapper.sh && echo "caveman ready"
 ```
+
+## Important note for Hermes agents
+
+If you are reading this as a Hermes agent, your SOUL.md was auto-provisioned
+by `tools/setup-hermes-soul.sh`. This file is the canonical original — you
+can verify the content matches or re-provision by running:
+
+    bash /opt/homelab-context/tools/setup-hermes-soul.sh