docs(security): fix secret redaction default docs

[helix4u]

What does this PR do?

Updates stale documentation that still described security.redact_secrets as disabled by default.

Hermes now defaults secret redaction on, so this PR aligns the configuration guide, bundled Hermes-agent skill source and generated skill page, and the agent.redact helper docstring with the current default.

Related Issue

Docs drift from #17691 / #20785.

Type of Change

• 🐛 Bug fix (non-breaking change that fixes an issue)
• ✨ New feature (non-breaking change that adds functionality)
• 🔒 Security fix
• 📝 Documentation update
• ✅ Tests (adding or improving test coverage)
• ♻️ Refactor (no behavior change)
• 🎯 New skill (bundled or hub)

Changes Made

• Updated website/docs/user-guide/configuration.md to show redact_secrets: true as the default and explain when to disable it.
• Updated skills/autonomous-ai-agents/hermes-agent/SKILL.md so the source skill no longer tells agents that redaction is off by default.
• Updated website/docs/user-guide/skills/bundled/autonomous-ai-agents/autonomous-ai-agents-hermes-agent.md to match the source skill.
• Updated the agent/redact.py helper docstring to match the current default.

How to Test

1. git diff --check

Checklist

Code

• I've read the Contributing Guide
• My commit messages follow Conventional Commits (fix(scope):, feat(scope):, etc.)
• I searched for existing PRs to make sure this isn't a duplicate
• My PR contains only changes related to this fix/feature (no unrelated commits)
• I've run pytest tests/ -q and all tests pass
• I've added tests for my changes (required for bug fixes, strongly encouraged for features)
• I've tested on my platform: N/A, docs/docstring only

Documentation & Housekeeping

• I've updated relevant documentation (README, docs/, docstrings) — or N/A
• I've updated cli-config.yaml.example if I added/changed config keys — or N/A
• I've updated CONTRIBUTING.md or AGENTS.md if I changed architecture or workflows — or N/A
• I've considered cross-platform impact (Windows, macOS) per the compatibility guide — or N/A
• I've updated tool descriptions/schemas if I changed tool behavior — or N/A

For New Skills

N/A.

Screenshots / Logs

git diff --check passed.

[teknium1]

This is already implemented on current main.

Automated hermes-sweeper review evidence:

• hermes_cli/config.py:2029 sets the actual default to "redact_secrets": True.
• website/docs/user-guide/configuration.md:1661 documents redact_secrets: true as on by default.
• skills/autonomous-ai-agents/hermes-agent/SKILL.md:456 and website/docs/user-guide/skills/bundled/autonomous-ai-agents/autonomous-ai-agents-hermes-agent.md:473 both say secret redaction is on by default.
• agent/redact.py:330 documents that redaction is enabled by default and disabled with security.redact_secrets: false.
• The corresponding main commits are aef04b2b537fbd37b465a4dccc45096af5e73229 and 3625dbb8442c357b1995e9fa750498dd697ba38b, both contained in v2026.6.5.

Thanks for catching and fixing the docs drift.