N0: rename Hermes → Nomos (standalone commit)

Problem: "Hermes" collides with Nous Researchs unrelated product;
  unclear identity for the resident agent.

  Change: Rename the live service identity across 39 files:
  - cmd/hermes/ → cmd/nomos/ (binary, env vars NOMOS_*)
  - internal/config/ server.go (NomosAgentSlug, nomosAgentID)
  - compose/hermes/ → compose/nomos/ (Dockerfile, service name)
  - hermes/ → nomos/ (SOUL.md, config.yaml, skills/)
  - .agents/HERMES.md → NOMOS.md (persona)
  - tools/setup-hermes-soul.sh → setup-nomos-soul.sh
  - seeds/inventory.yaml (agent:hermes → agent:nomos)
  - migrations/014_rename_agent_hermes_to_nomos.up.sql
  - Caddy vhost hermes.hubris.network → nomos.hubris.network
  - All referencing docs, scripts, ADR notes

  History preserved: archive/, plans/done/, ADRs not rewritten.
  Matrix @hermes notifier account and Legacy bin/hermes on LXC 129
  intentionally untouched (out of scope).

  Risk: N0 is identity-only rename; zero behavioral changes.
  Verification: go build ./... passes; docker compose --profile full
  resolves nomos service; grep -ri hermes (excluding archive/plans)
  returns only intentional refs (LLM model name, Matrix user).

seeds/inventory.yaml

@@ -325,7 +325,7 @@ entities:
      attributes: {matrix_id: "@dtoro:avispero"}}
   - {slug: "idp:authentik", type: identity-provider, name: authentik,
      attributes: {issuer: "https://auth.hubris.network", auth_mode: both}}
-  - {slug: "agent:hermes", type: agent, name: hermes,
+  - {slug: "agent:nomos", type: agent, name: nomos,
       state: active,
       attributes: {gateway_port: 8092, session_mode: smart_approve, note: "Phase 4 — Docker gateway mode"}}
   - {slug: "agent:oikos", type: agent, name: oikos,
@@ -334,7 +334,7 @@ entities:
 
   # ─── Archaeology (state: destroyed — kept for "what happened to X?") ─
   - {slug: "lxc:claudio-bot", type: lxc, name: claudio-bot, state: destroyed,
-     attributes: {pve_id: 123, destroyed: "2026-06-04", reason: "replaced by Hermes Agent on mac-mini"}}
+     attributes: {pve_id: 123, destroyed: "2026-06-04", reason: "replaced by Nomos Agent on mac-mini"}}
   - {slug: "lxc:plato", type: lxc, name: plato, state: destroyed,
      attributes: {pve_id: 126, destroyed: "2026-06-28", reason: "notes workspace decommissioned; data at /mnt/library/documents/plato"}}
   - {slug: "lxc:mule-photos-new", type: lxc, name: mule-photos-new, state: destroyed,
@@ -538,5 +538,5 @@ relationships:
   - {source: "lxc:rclone", target: "backup:proton-drive", type: backs-up-to}
 
   # ─── Governance ────────────────────────────────────────────────────
-  - {source: "person:dtoro", target: "agent:hermes", type: owns}
+  - {source: "person:dtoro", target: "agent:nomos", type: owns}
   - {source: "person:dtoro", target: "agent:oikos", type: owns}