Guard unique public surfaces

[kriptoburak]

Summary

• add regression coverage that the registered public-surface file list contains no duplicates
• keep public link and safety scan inputs stable as the surface registry grows

Validation

• uv run ruff format --check .
• uv run ruff check .
• uv run basedpyright
• uv run pytest --cov=hermes_tweet --cov=tests --cov-report=term-missing --cov-fail-under=100
• uv run bandit -q -r hermes_tweet scripts
• uv run python scripts/check_public_safety.py
• uv run pip-audit
• uv run python scripts/check_public_links.py
• uv run python scripts/check_hermes_agent_compat.py
• uv build
• uv run twine check dist/*
• actionlint
• git diff --check

Note

Add uniqueness test for PUBLIC_SURFACE_FILES entries

Adds a test in test_public_surfaces.py that asserts all entries in PUBLIC_SURFACE_FILES are unique by comparing the list length to the set length.

^{Macroscope summarized 608e4cb.}