build(agent-image): lock hermes-agent v2026.5.29.2 (enables publishing) (#49)

Generated by the `agent-image-relock` workflow (native pinned uv
0.11.7), now that the toolchain is fixed.

- Adds `images/hermes-agent/uv.lock` (the missing lockfile that blocked
all publishing).
- Repins `pyproject.toml` to **`v2026.5.29.2`** — the real latest
upstream tag. `NousResearch/hermes-agent` uses CalVer; the old `v0.13.0`
pin never existed (`couldn't find remote ref refs/tags/v0.13.0`).
- Fixes the Makefile `HERMES_VERSION` default to the same real tag.

After merge: dispatch `agent-image` for `v2026.5.29.2` → publishes
`ghcr.io/paperclipinc/hermes-agent:v2026.5.29.2` + `:latest` → make the
package public.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: 3 people

Makefile

@@ -124,7 +124,7 @@ docker-buildx: ## Build and push docker image for the manager for cross-platform
 # -------- hermes-agent image (Plan 3) --------
 
 AGENT_IMAGE         ?= ghcr.io/paperclipinc/hermes-agent
-HERMES_VERSION      ?= v0.13.0
+HERMES_VERSION      ?= v2026.5.29.2
 AGENT_IMAGE_PLATFORMS ?= linux/amd64,linux/arm64
 
 # Build the agent image for the current platform. Local dev only.
@@ -146,11 +146,10 @@ agent-image-buildx:
 		images/hermes-agent
 
 # Refresh images/hermes-agent/uv.lock for the requested HERMES_VERSION.
-# Rewrites the git ref in pyproject.toml, then runs `uv lock` inside an
-# ephemeral uv container so it works the same on developer laptops and in CI.
-# Requires network access to resolve the git dependency.
+# Rewrites the git ref in pyproject.toml, then runs native uv (uses the host
+# git + python to resolve the git+https dependency). Requires network access.
 .PHONY: agent-image-relock
-agent-image-relock: ## Relock images/hermes-agent/uv.lock for HERMES_VERSION. Requires local uv + git (resolves the git+https hermes-agent dep). CI alternative: run the agent-image-relock workflow (pins uv 0.5.0).
+agent-image-relock: ## Relock images/hermes-agent/uv.lock for HERMES_VERSION. Requires local uv + git (resolves the git+https hermes-agent dep). CI alternative: run the agent-image-relock workflow (pins uv 0.11.7).
 	sed -i.bak -E 's|(hermes-agent @ git\+https://github.com/NousResearch/hermes-agent@)[^"]+|\1$(HERMES_VERSION)|' images/hermes-agent/pyproject.toml
 	rm -f images/hermes-agent/pyproject.toml.bak
 	cd images/hermes-agent && UV_FROZEN=false uv lock

images/hermes-agent/pyproject.toml

@@ -14,7 +14,7 @@ requires-python = ">=3.11"
 dependencies = [
     # Pinned upstream. `make agent-image-relock HERMES_VERSION=vX.Y.Z` rewrites
     # the @ ref and regenerates uv.lock for reproducible image builds.
-    "hermes-agent @ git+https://github.com/NousResearch/hermes-agent@v0.13.0",
+    "hermes-agent @ git+https://github.com/NousResearch/hermes-agent@v2026.5.29.2",
 ]
 
 [tool.uv]