feat: herdr + agent network over netbird

hosts/m3-hermes/programs.nix

@@ -1,6 +1,7 @@
 {pkgs, ...}: {
   programs.nix-ld.enable = true;
   programs.nix-ld.libraries = with pkgs; [];
+  programs.mosh.enable = true;
   programs.fish.enable = true;
   programs.nh = {
     enable = true;

hosts/m3-hermes/services/hermes-agent.nix

@@ -73,6 +73,10 @@ in {
     extraPackages = with pkgs; [
       basecamp
       docker
+      herdr
+      opencode
+      pi-coding-agent
+      bun
       git
       curl
       jq
@@ -123,7 +127,7 @@ in {
     settings = {
       # ── Model ──────────────────────────────────────────────────────────
       model = {
-        default = "glm-5.2";
+        default = "glm-5.3";
         provider = "zai";
       };
 
@@ -290,6 +294,7 @@ in {
     isNormalUser = false;
     openssh.authorizedKeys.keys = [
       "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICAVF7jGP1S6vc5CxeBFD/UxiImHOgbPlKg8WYyNtOA3"
+      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBZcjCKl0DRuOUOMXbM0GKY5JjvmyFpVZ/tRlTKWu/zp"
     ];
   };
 }