feat(desktop): polish credentials settings and messaging env routing

[austinpickett]

What does this PR do?

Improves the Hermes desktop settings experience for credentials, messaging, and skills:

• Tools & Keys — Replaces top tabs with sidebar subnav (Tools / Settings), matching Providers. Credential rows use the same ListRow + compact input styling as Advanced config.
• Provider API keys — Same ListRow layout; advanced provider fields are always visible. Fixes a runtime crash from a missing ChevronDown import on the Accounts view.
• Messaging env vars — Gateway discovers platform-prefixed messaging env vars (Discord home channel, Matrix recovery, etc.) and marks them channel_managed so they appear on Messaging, not Tools & Keys. Gateway-wide vars (GATEWAY_PROXY_*, etc.) stay on Tools & Keys → Settings.
• Toolset labels — Strips leading emojis in the API (gui_toolset_label) and desktop Skills UI.
• Cron — Condenses per-job actions into an overflow (⋯) menu.

Related Issue

Fixes #

Type of Change

• 🐛 Bug fix (non-breaking change that fixes an issue)
• ✨ New feature (non-breaking change that adds functionality)
• 🔒 Security fix
• 📝 Documentation update
• ✅ Tests (adding or improving test coverage)
• ♻️ Refactor (no behavior change)
• 🎯 New skill (bundled or hub)

Changes Made

• hermes_cli/web_server.py — _discover_platform_env_vars, _merge_platform_env_vars, _MESSAGING_KEYS_PAGE_KEYS, expanded channel_managed set
• hermes_cli/tools_config.py — gui_toolset_label() for emoji-free toolset names
• apps/desktop/src/app/settings/credential-key-ui.tsx — shared ListRow credential components
• apps/desktop/src/app/settings/index.tsx — Tools & Keys + Providers sidebar subnav (kview, pview)
• apps/desktop/src/app/settings/keys-settings.tsx, providers-settings.tsx — adopt shared credential UI
• apps/desktop/src/app/messaging/index.tsx — field copy for migrated platform vars
• apps/desktop/src/app/cron/cron-job-actions-menu.tsx, cron/index.tsx — overflow actions menu
• apps/desktop/src/app/skills/index.tsx, helpers.ts — client-side toolset label strip
• tests/hermes_cli/test_web_server.py, test_tools_config.py — coverage for channel_managed + label strip
• web/src/pages/SkillsPage.tsx — rely on API for toolset labels

How to Test

1. Restart the desktop gateway, open Settings → Tools & Keys — confirm Tools / Settings are sidebar subnav items with Advanced-style inputs (no monospace).
2. Open Settings → Providers → API keys — confirm rows render and Accounts view does not crash when expanding “Other providers”.
3. Open Messaging per platform — confirm Discord/Matrix/QQ/Mattermost extras appear; Tools & Keys → Settings should only show gateway-wide messaging vars.
4. Open Skills — toolset names should have no leading emojis.
5. Open Cron — job actions should be in a ⋯ menu.
6. uv run pytest tests/hermes_cli/test_web_server.py::TestWebServerEndpoints::test_platform_scoped_messaging_env_vars_are_channel_managed tests/hermes_cli/test_tools_config.py::test_gui_toolset_label_strips_leading_emoji -q

Checklist

Code

• I've read the Contributing Guide
• My commit messages follow Conventional Commits (fix(scope):, feat(scope):, etc.)
• I searched for existing PRs to make sure this isn't a duplicate
• My PR contains only changes related to this fix/feature (no unrelated commits)
• I've run pytest tests/ -q and all tests pass
• I've added tests for my changes (required for bug fixes, strongly encouraged for features)
• I've tested on my platform: Linux (WSL2)

Documentation & Housekeeping

• I've updated relevant documentation (README, docs/, docstrings) — or N/A
• I've updated cli-config.yaml.example if I added/changed config keys — or N/A
• I've updated CONTRIBUTING.md or AGENTS.md if I changed architecture or workflows — or N/A
• I've considered cross-platform impact (Windows, macOS) per the compatibility guide — or N/A
• I've updated tool descriptions/schemas if I changed tool behavior — or N/A

For New Skills

N/A

Screenshots / Logs

[github-actions]

🔎 Lint report: austin/fix/cron-actions-gui vs origin/main

ruff

Total: 0 on HEAD, 0 on base (➖ 0)

🆕 New issues: none

✅ Fixed issues: none

Unchanged: 0 pre-existing issues carried over.

ty (type checker)

Total: 9840 on HEAD, 9840 on base (➖ 0)

🆕 New issues: none

✅ Fixed issues: none

Unchanged: 5102 pre-existing issues carried over.

Diagnostics are surfaced as warnings — this check never fails the build.