feat(hermes): add native lifecycle hooks

[beruro]

Problem

Hermes sessions do not currently report their native lifecycle through ORG2’s existing authenticated status pipeline, leaving external and integrated TUI sessions without authoritative lifecycle hooks.

Solution

• Add and enable the managed orgii-status Hermes plugin.
• Post privacy-safe lifecycle callbacks to the authenticated loopback server.
• Translate Hermes events into the existing AgentStatusEventV1 pipeline.
• Support external and integrated TUI sessions through ORGII_SESSION_ID.
• Validation: 8 Python tests, Python compile check, scoped Rust formatting/clippy, diff check, and GitHub CI.

Potential risks

• Hermes plugin/API changes could require lifecycle payload updates.
• Loopback availability and session-ID propagation remain external runtime dependencies.
• This PR deliberately excludes polling, UI, i18n, and historical merge content.

Verification

Published branch was rebased by GitHub onto current develop at 7be527a7a, producing head c4ff5b657. The rebase completed without conflicts, and changed-file/addition/deletion counts are unchanged from the pre-rebase PR. CI is rerunning on this integrated head.

Previous GitHub CI on head ff8cb2e6f:

• pnpm install --frozen-lockfile — PASS in Frontend (typecheck · lint · test).
• pnpm typecheck — PASS in Frontend (typecheck · lint · test).
• pnpm lint — PASS in Frontend (typecheck · lint · test).
• pnpm run test — PASS in Frontend (typecheck · lint · test).
• node scripts/tauri/prepare-sidecars.cjs --profile debug — PASS in Rust (clippy).
• (cd src-tauri && cargo clippy --workspace --all-targets -- -D warnings) — PASS in Rust (clippy).
• AI-attribution history scan — PASS.

Not run: a live Hermes lifecycle callback against a packaged desktop build; loopback and session-ID propagation remain external runtime dependencies.