test(hermes): cover MCP integrity through restart - #7761

This internal diff (PR SHA 8481c6838d68c6b9d6c7e0916c6ee9a2025f042f, base SHA cf34b72863b662e2739f3ae87240e01b7b54b7bd) changes code that the selected credential-bearing E2E jobs or targets execute or trust (jobs: cloud-inference, cloud-onboard, security-posture, mcp-bridge, mcp-bridge-dev).

No selected E2E job or target ran and no repository secret was exposed.

An authorized E2E reviewer must review PR SHA 8481c6838d68c6b9d6c7e0916c6ee9a2025f042f against base SHA cf34b72863b662e2739f3ae87240e01b7b54b7bd. Open E2E / PR Gate Controller run 30406957923, choose Review deployments, and approve the approve-credentialed-e2e-for-internal-pr environment. GitHub records the reviewer and optional comment, then the trusted controller dispatches this exact plan. If Review deployments is absent, the environment is unprotected or the run is no longer waiting; configure it, update the PR to create a new head, and trigger fresh PR CI.

The manual maintainer fallback remains available from the E2E / PR Gate Controller workflow through run-control-plane. This gate passes only if the dispatched evidence references both SHAs and verifies successfully.

Deterministic plan: e455e0c2c29e017c00f22ba28a47856b0fbf02b127d722623ec79f8003311743.