feat(cron): user-owned model pins + cron.model fleet default

[teknium1]

Summary

Cron per-job model pins are now user-owned, and a new cron.model config key gives the cron fleet its own default model — switching your chat model with /model or hermes model never touches unattended cron spend again.

Root cause of the pain (#59031, fastfinge's "hundreds of jobs break on every model switch"): unpinned jobs followed the global chat model, so the #44585 fail-closed drift guard tripped fleet-wide on every deliberate switch, with no way to route cron independently.

Changes

• tools/cronjob_tools.py — the agent-facing cronjob tool schema no longer exposes model/provider/base_url, and the registered handler ignores them even if a model hallucinates the old parameters. Per-job inference pins are user-owned: dashboard, hermes cron create/edit --model/--provider, or jobs.json. Existing pins are grandfathered untouched; the programmatic cronjob() function keeps its parameters for the dashboard/CLI callers. Removes the now-dead _resolve_model_override.
• hermes_cli/config.py — new cron.model / cron.model_provider keys (cron-fleet inference default, distinct from the cron.provider scheduler axis). The switch-time drift warning (Warn before model config changes trip cron drift guard #59177) stays quiet for an axis covered by the fleet default.
• cron/scheduler.py — fire-time resolution: per-job pin → cron.model → HERMES_MODEL → model.default; provider: per-job pin → cron.model_provider → global resolution. Drift guard skips any axis covered by the explicit fleet default — deliberate routing is not drift. Uncovered axes still fail closed.
• cron/jobs.py — snapshot resolution mirrors the new precedence so create-time snapshots stay consistent.
• hermes_cli/subcommands/cron.py + hermes_cli/cron.py — --model / --provider on hermes cron create and hermes cron edit (empty string clears a pin on edit).
• website/docs/user-guide/features/cron.md — model-resolution tip rewritten around the three-tier order.

Validation

Check	Result
tests/cron/ + cronjob tool + config tests (targeted, CI-parity runner)	962 passed, 0 failed
E2E (temp HERMES_HOME, real registry dispatch + jobs store)	agent-supplied model args ignored; user pins stick through agent updates; cron.model snapshot honored
ruff on all touched files	clean

Infographic

[github-actions]

૮ >ﻌ< ა ci review

_{ran on 0fa395a}

ℹ️ Info

Desktop E2E visual evidence · View test artifacts · View job

1 visual diff.

_{inline evidence upload failed.}

Failed to upload diff-665a0833239e-onboarding-overlay-diff.png with gh image (exit code 1): Error uploading /home/runner/work/_temp/e2e-evidence/diff-665a0833239e-onboarding-overlay-diff.png: step 0 (get upload token): uploadToken not found on repo page — do you have write access to NousResearch/hermes-agent? (or, if NousResearch enforces SAML SSO, authorize at https://github.com/orgs/NousResearch/sso)