phase 4: hermes agent — MCP tools, activity logging, 'all' role, wiring fixes

- mcp/server.go: 7 new tools (get_signal_history, get_patterns, get_skills,
  request_execution, get_trend, get_event_timeline, get_agent_activity),
  agent_activity logging middleware on every tool call.
- phase3.go: QueryAgentActivity REST handler implemented (was stub).
  Fixed scan count mismatch in ListSkills/PatchSkill/ListSkillVersions
  (13 cols → 12 targets). Fixed AgentActivity cursor pagination
  (lexicographic → integer comparison). Fixed s.Slug → s.Name in log.
- cmd/oikos/main.go: 'all' role now runs api + scheduler + notifier in
  one process. Replaced nil SchedulerRunner/NotifierRunner with direct
  scheduler.RunnerForMain() / notifier.RunnerForMain() imports.
  Added runWithPool helper for standalone scheduler/notifier roles.
- internal/config/config.go: added HermesAgentID env var.
- internal/httpapi/server.go: pass HermesAgentID to MCP handler.
- docker-compose.yml: added scheduler and notifier services (dev profile).
- hermes/: config.yaml, SOUL.md, skills/homelab-ops/SKILL.md.
- Cleaned up: scheduler/init.go dead code, mcp/server.go pgx import guard.

cmd/oikos/main.go

@@ -13,15 +13,14 @@ import (
 	"github.com/dtoro/oikos/internal/config"
 	"github.com/dtoro/oikos/internal/db"
 	"github.com/dtoro/oikos/internal/httpapi"
+	"github.com/dtoro/oikos/internal/notifier"
 	"github.com/dtoro/oikos/internal/observability"
+	"github.com/dtoro/oikos/internal/scheduler"
 	"github.com/jackc/pgx/v5"
 )
 
-// SchedulerRunner is set by the scheduler init() to avoid circular imports.
-var SchedulerRunner func(context.Context, *db.Pool, config.Config)
-
-// NotifierRunner is set by the notifier init() to avoid circular imports.
-var NotifierRunner func(context.Context, *db.Pool, config.Config)
+var schedulerRunner = scheduler.RunnerForMain()
+var notifierRunner = notifier.RunnerForMain()
 
 func main() {
 	if len(os.Args) < 2 {
@@ -64,22 +63,30 @@ func main() {
 			os.Exit(1)
 		}
 	case "scheduler":
-		if SchedulerRunner != nil {
-			SchedulerRunner(ctx, nil, cfg)
-		} else {
-			slog.Error("scheduler not compiled in (import internal/scheduler)")
-			os.Exit(1)
-		}
+		runWithPool(ctx, cfg, "scheduler", schedulerRunner)
 	case "notifier":
-		if NotifierRunner != nil {
-			NotifierRunner(ctx, nil, cfg)
-		} else {
-			slog.Error("notifier not compiled in (import internal/notifier)")
+		runWithPool(ctx, cfg, "notifier", notifierRunner)
+	case "all":
+		pool, err := db.New(ctx, cfg.DatabaseURL)
+		if err != nil {
+			slog.Error("connect db", "error", err)
+			os.Exit(1)
+		}
+		defer pool.Close()
+
+		if err := pool.Migrate(ctx); err != nil {
+			slog.Error("migrate", "error", err)
+			os.Exit(1)
+		}
+
+		go schedulerRunner(ctx, pool, cfg)
+		go notifierRunner(ctx, pool, cfg)
+
+		slog.Info("all: starting api with scheduler + notifier in background")
+		if err := httpapi.ListenAndServe(ctx, pool, cfg); err != nil {
+			slog.Error("api failed", "error", err)
 			os.Exit(1)
 		}
-	case "all":
-		slog.Info("all role not yet implemented (runs api + scheduler + notifier in one process)")
-		os.Exit(1)
 	case "version":
 		fmt.Println("oikos dev (Phase 1)")
 	case "help", "--help", "-h":
@@ -231,6 +238,22 @@ func runAPI(ctx context.Context, cfg config.Config) error {
 	return err
 }
 
+func runWithPool(ctx context.Context, cfg config.Config, name string, fn func(context.Context, *db.Pool, config.Config)) {
+	pool, err := db.New(ctx, cfg.DatabaseURL)
+	if err != nil {
+		slog.Error("connect db", "role", name, "error", err)
+		os.Exit(1)
+	}
+	defer pool.Close()
+
+	if err := pool.Migrate(ctx); err != nil {
+		slog.Error("migrate", "role", name, "error", err)
+		os.Exit(1)
+	}
+
+	fn(ctx, pool, cfg)
+}
+
 func runExport(ctx context.Context, cfg config.Config) error {
 	pool, err := db.New(ctx, cfg.DatabaseURL)
 	if err != nil {