docs: tool provider selection follows the hermes tools pick (post #90317)

[teknium1]

Summary

Docs now describe the strict provider-selection contract that merged in #90317: the provider picked in hermes tools (or the desktop GUI) is what runs — one selection key per category, nous = managed Tool Gateway, vendor name = BYOK direct, credential presence never selects or reroutes, and a selected-but-broken provider errors by name instead of silently falling back.

Follow-up docs PR for #90317 (the code merged before the docs check; per the new standing rule, future PRs carry their docs in the same diff — this is the catch-up).

Changes

• user-guide/features/tool-gateway.md (+ zh): the per-tool use_gateway section replaced with the one-key-per-category contract, exact error string, and a "Legacy use_gateway (deprecated)" note covering read-time interpretation of old configs
• integrations/nous-portal.md, guides/run-hermes-with-nous-portal.md: config examples rewritten from use_gateway: true blocks to provider/backend/cloud_provider: nous
• user-guide/features/image-generation.md (+ zh): strict routing + the FAL_KEY error documented
• user-guide/features/browser.md (+ zh): Camofox is a cloud_provider: camofox selection; CAMOFOX_URL is address-only
• user-guide/features/tts.md: explicit selection vs never-configured autodetect for TTS/STT; nous value documented; explicit stt.provider: local honored
• user-guide/messaging/whatsapp-cloud.md: STT gateway setup now stt.provider: nous
• reference/environment-variables.md (+ zh): CAMOFOX_URL marked address-only

13 files, 86 insertions / 64 deletions. No new pages, no sidebar changes.

Validation

	Result
npx docusaurus build (npm@12 ci)	success; only pre-existing zh anchor warnings
Contract accuracy	error strings and config keys match the merged code verbatim

Infographic

Omitted: docs-only follow-up; image account on this box is the exhausted direct FAL key. Backfill via gh pr edit if wanted.

[github-actions]

૮ >ﻌ< ა ci review

_{ran on 01d4c1d — docs: tool provider selection follows the hermes tools pick}

⚠️ Warnings

OSV vulnerability scan · View job

7 known vulnerabilities found in pinned dependencies.

• CVE-2026-67213 in package-lock.json
• CVE-2026-67213 in website/package-lock.json
• CVE-2026-71554 in uv.lock
• CVE-2026-70608 in package-lock.json
• CVE-2026-56876 in package-lock.json
• CVE-2026-70606 in package-lock.json
• CVE-2026-71554 in uv.lock

How to fix:

Review the findings in the Security tab. Update the affected dependencies if a patched version is available.

---

debug info

CI timings

CI timings · View report · View job

Wall time 7m15s vs 7m56s (-8.6%). 13 job(s) slower, 11 faster, 1 unchanged.

• Python tests / Run tests slice 5/12: -37.0s
• Python tests / Run tests slice 8/12: -29.0s
• Python tests / Run tests slice 4/12: +27.0s
• Python tests / Run tests slice 3/12: +25.0s
• Python tests / Run tests slice 11/12: -23.0s