fix(windows): native Windows correctness fixes + green CLI test suite

[lEWFkRAD]

What does this PR do?

Running the test suite natively on Windows (not WSL) surfaced 16 failures across tests/cli, tests/gateway, and tests/tools. Triaging them found 4 real product bugs plus a handful of POSIX assumptions in the tests themselves. With this PR, pytest tests/cli tests/gateway/test_status.py tests/tools/test_windows_native_support.py tests/test_windows_subprocess_no_window_flags.py is fully green on native Windows (1180 passed, 5 legitimately skipped) and stays green on POSIX.

Product fixes

1. Gateway profile liveness mis-match on mixed path separators (gateway/status.py, hermes_cli/gateway.py): _command_line_belongs_to_profile compared str(Path) (backslashes on Windows) against HERMES_HOME= argv values that may carry forward slashes (wmic/CIM output, Git Bash, JSON configs) — a live named-profile gateway could be reported not-running by the dashboard's cross-profile check. Both sides now normalize to forward slashes.
2. cprint crashes when stdout has no console (hermes_cli/banner.py): prompt_toolkit's Win32Output raises NoConsoleScreenBufferError under pythonw.exe, CI, or redirected stdout. A display helper should never crash its caller — it now degrades to plain print, matching the fallback cli._cprint already has.
3. file:///C:/... drops don't resolve (cli.py): urlparse keeps the leading slash (/C:/...); it is now stripped for drive-letter paths so dragging a file into the CLI works on Windows.
4. POSIX-literal paths joined with os.path.join (cli.py termux hint, hermes_cli/browser_connect.py WSL chrome candidates): produced /sdcard\Pictures\cat.png on native Windows. Joined with literal forward slashes / posixpath.join.

Test-suite fixes

• New tests/cli/conftest.py: 9 test modules build a CLI via importlib.reload(cli) with prompt_toolkit stubbed in sys.modules. reload() re-executes into the same module dict, so the MagicMock bindings (_pt_print, _PT_ANSI, ...) survive the patch.dict context and silently swallow _cprint output in any later test (this is what made test_resume_quiet_stderr order-dependent). An autouse module-scoped fixture restores the real bindings when the pollution is detected.
• Symlink tests skip when the process lacks symlink privileges (WinError 1314 without Developer Mode), reusing the existing _can_symlink() convention from test_symlink_prefix_confusion.py.
• Tilde-expansion tests set USERPROFILE alongside HOME (ntpath.expanduser ignores HOME since Python 3.8).
• test_windows_native_support.py: two tests violated the file's own "every test mocks the platform" contract — the no-op test now mocks is_windows(), and the real-SIGKILL assertion is skipped on win32.
• Cross-platform regression test for the mixed-separator profile match.

Related Issue

Follow-up to the native-Windows work in #43933 and #54565.

Type of Change

• 🐛 Bug fix (non-breaking change that fixes an issue)
• ✅ Tests (adding or improving test coverage)

Changes Made

• gateway/status.py, hermes_cli/gateway.py — separator-normalized profile matching
• hermes_cli/banner.py — cprint console fallback
• cli.py — file URI drive-letter fix, termux hint posix join
• hermes_cli/browser_connect.py — posixpath.join for WSL candidates
• tests/cli/conftest.py (new) — un-pollute cli module after stubbed reloads
• tests/cli/*, tests/gateway/test_status.py, tests/tools/test_windows_native_support.py — Windows-safe tests + regression coverage

How to Test

1. On native Windows: python -m pytest tests/cli tests/gateway/test_status.py tests/tools/test_windows_native_support.py tests/test_windows_subprocess_no_window_flags.py → previously 16 failures, now green (1180 passed, 5 skipped).
2. On Linux/macOS: same command — no behavior change (the new conftest fixture is a no-op when no pollution occurred; product changes only affect Windows-only or WSL-literal code paths).
3. python scripts/check-windows-footguns.py --all → clean.

🤖 Generated with Claude Code

[teknium1]

Thanks for the native-Windows cleanup. The reported production defects are still present on current main: profile checks compare unnormalized paths in gateway/status.py:361-370 and hermes_cli/gateway.py:357-371; banner.cprint has no fallback at hermes_cli/banner.py:39-43; and the URI/WSL joins remain at cli.py:2774-2777, cli.py:2841-2847, and hermes_cli/browser_connect.py:91-124.

Problems

• The PR does not add direct regression coverage for the drive-letter URI, no-console cprint, or WSL candidate-join fixes. The current file-URI test only covers a POSIX Path.as_uri() form (tests/cli/test_cli_file_drop.py:202-207), and no browser-connect or banner test is changed in the PR diff.

Suggested changes

• Add focused tests for file:///C:/... under the Windows path branch, cprint fallback after a prompt_toolkit output exception, and forward-slash WSL candidates when path joining runs on an nt host.

Automated hermes-sweeper review.

[teknium1]

Please add a focused regression test that makes print_formatted_text raise and verifies this fallback emits through plain print; no banner test is changed by this PR.

[teknium1]

Merged in part via the round-4 closeout PR #74614 (commit fbb93fa, your authorship preserved). Landed: the four verified Windows product fixes — drive-letter file:///C:/ URI handling (cli.py), backslash→slash HERMES_HOME normalization before profile matching (gateway/status.py + hermes_cli/gateway.py), banner cprint NoConsole fallback, posixpath.join for WSL browser paths — plus the symlink skip-guards and USERPROFILE-aware test hardening. Dropped: the CLI conftest fixture and AppSession monkeypatch (the pollution they addressed was root-fixed on main via #68872), and hunks superseded by the merged Windows-native work. Between this, #57066, #63981, #61598, #57119 and #57182, your whole cluster has now landed or been resolved — thanks for the sustained, high-quality diagnosis work @lEWFkRAD!