fix(gateway): respect explicit platform disable for HA and wrap kanban auto-decompose in profile scope

[bwoliveira]

Summary

Fixes two related issues when running Hermes Agent in multiplexed gateway mode ():

1. ****: Home Assistant platform overrides did not check when was present in the environment. In multiplexed setups, secondary worker profiles with were force-enabled during env override processing, causing duplicate credential errors on startup.
2. ****: Embedded ran on background threads () without entering . When invoked LLM calls via , threw secret-scope errors in multiplexed mode, silently failing triage auto-decomposition every 15s.

Validation

• Unit tests run via (all passed cleanly).
• Verified live on multiplexed gateway setup: secondary worker profiles load without duplicate credential errors, and triage tasks automatically decompose on the 15s tick.

[alt-glitch]

This was generated by AI during triage.

Duplicate of #57837 for the kanban auto-decompose secret-scope repair: both install profile secret scope around the same gateway watcher tick. This PR also carries an unrelated Home Assistant enablement change, which should be submitted separately.

[teknium1]

Thanks for identifying two real multiplexed-gateway failure modes.

Problems

• This combines two independent fixes. The existing maintainer comment identifies the kanban repair as overlapping fix(kanban): run auto-decompose tick under the profile secret scope #57837 and requests the Home Assistant change separately.
• No regression tests accompany either change. Current HA coverage only verifies env-driven enablement (tests/gateway/test_homeassistant.py:236-251), while current auto-decompose coverage only verifies live settings resolution (tests/gateway/test_kanban_auto_decompose_live.py:17-27). Neither protects these regressions.

Suggested changes

• Submit the HA explicit-disable correction as a focused change with a HASS_TOKEN plus explicit enabled: false regression test.
• Reconcile the kanban scope change with fix(kanban): run auto-decompose tick under the profile secret scope #57837, which already carries dedicated scope-installation coverage for this same threaded tick.

Automated hermes-sweeper review.

[bwoliveira]

Closing this combined PR in favor of #57837 (for the kanban secret-scope fix) and #76871 (standalone PR for the Home Assistant explicit-disable fix). Thanks!