fix(cli): suppress OAuth provider warnings in doctor when provider not in use

[tommck]

What changed and why

hermes doctor was unconditionally showing ⚠ not logged in warnings for every OAuth provider it knows about (Nous Portal, OpenAI Codex, Google Gemini, MiniMax, xAI), regardless of which provider the user actually had configured.

For users running a local/custom OpenAI-compatible endpoint (model.provider: custom) or any API-key provider, these warnings are pure noise — there is nothing to act on.

Root cause: The Auth Providers section had no knowledge of model.provider, so it always warned for every OAuth provider that wasn't logged in.

Fix: Read model.provider from config.yaml before the Auth Providers section runs, and pass it to a new _oauth_check() helper. Providers whose relevant_ids set does not include the configured provider are demoted from ⚠ warnings to → info lines. All providers still appear in the output (for discoverability); only the severity changes.

Behaviour summary:

Configured provider	Result
custom / any API-key provider	All OAuth rows → → info lines
nous	Nous Portal → ⚠ warn; others → → info
xai	xAI OAuth → ⚠ warn; others → → info
No model.provider set	All OAuth rows → ⚠ warn (safe default)

How to test

# Reproduce the original issue:
hermes config set model.provider custom
hermes config set model.base_url http://127.0.0.1:8080/v1
hermes doctor
# Before: all OAuth rows show ⚠ warnings
# After:  all OAuth rows show → info lines

# Verify warnings still appear for the active OAuth provider:
hermes config set model.provider nous
hermes doctor
# Nous Portal auth shows ⚠; others show → info

Unit tests:

pytest tests/hermes_cli/test_doctor.py::TestDoctorOAuthSkippedForUnusedProviders -v

Platforms tested

Linux (Ubuntu 24.04). The change touches only output formatting logic with no platform-specific syscalls.

Notes

• Existing tests (TestDoctorXaiOAuthStatus, TestDoctorCodexCliHintPlacement) all pass unchanged — they use configs with no model.provider, which correctly falls through to the "show all as warnings" path.
• The _oauth_check() helper is a local function inside run_doctor(); no new public API is added.

[teknium1]

Thanks for identifying a real diagnostic-noise issue: current hermes doctor still warns unconditionally for the displayed OAuth rows (hermes_cli/doctor.py:1109-1152).

Problems

• The proposed mapping treats xai/grok and minimax as OAuth providers. Current metadata defines those as API-key providers; OAuth is xai-oauth (hermes_cli/providers.py:72-77) and minimax-oauth (hermes_cli/providers.py:124-128). This would suppress warnings for the actual OAuth configurations while retaining them for API-key users.
• The diff still imports and tests Google Gemini CLI OAuth, but that provider and doctor row were removed by 7130d60861a9243301514bff611a9381830d59d8.
• Current auth metadata also has qwen-oauth (hermes_cli/auth.py:206-210), absent from the proposed map.

Suggested changes

• Salvage against current hermes_cli/doctor.py, derive relevance from current canonical provider IDs/aliases, and add regressions for API-key vs OAuth variants (xai/xai-oauth, minimax/minimax-oauth).

Automated hermes-sweeper review.