verified bundled Python imports for matrix/honcho/exa/edge-tts backends
## Summary
- switch Hermes optional runtime deps to the v0.14 Nix module extraDependencyGroups instead of hand-built PYTHONPATH glue
- add Honcho, Exa, Edge TTS, and Matrix optional groups for the sealed package
- move uv into Hermes extraPackages and add curl/jq/python3 for agent shell tasks
- fix the tea config tmpfiles path to the actual /var/lib/hermes home
- add registry ports for Hermes API/dashboard and restrict both endpoints to Netbird in the firewall
## Verification
- nix run nixpkgs#alejandra -- --check hosts/m3-hermes/services/hermes-agent.nix hosts/m3-hermes/services/hermes-dashboard.nix hosts/common/ports.nix
- nix build .#nixosConfigurations.m3-hermes.config.system.build.toplevel --impure --no-link
- verified bundled Python imports for matrix/honcho/exa/edge-tts backends
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Summary
Verification