test(integration): verify safe fetches with Telegram proxy

[0xildefonso]

Purpose

Provides a normal GitHub CI run for the exact Hermes integration tree pinned by Pieverse-Eng/purrfect-claw-platform#1786.

This PR contains no conflict resolution or novel implementation. Integration head 771cd9d623ea0915c0f3ef8761db86e54e79d260 is a clean merge with exactly these parents:

1. 11df964e8379972537ce8604177be993f1d798a1 — current platform Telegram managed-proxy pin and this PR's base
2. c5ee8b6ac9705da54f0d11f0d5182f74d679857a — reviewed redirect-safe media child from fix: pin untrusted Python media fetches #30

The platform cannot pin #30 directly because the two heads diverge; doing so would silently remove the Telegram fix.

Tree invariants

• delta versus c5ee8b6a…: exactly the three Telegram files from 11df964e…
• delta versus 11df964e…: exactly the 26-file fix: pin untrusted Python media fetches #30 set
• no conflict resolutions
• no file dropped from either parent

Verification

• local combined integration suite: 925 passed, 0 failed, serial
• includes tests/gateway/test_telegram_max_doc_bytes.py
• ruff check .: passed
• ty check tools/safe_http.py: passed
• exact parent and bidirectional file-set assertions: passed
• git diff --check against both parents: passed

Do not merge this integration PR; it exists to make the exact pinned tree reproducibly CI-tested. Canonical security review remains #30.

Refs Pieverse-Eng/purrfect-claw-platform#1732

[xxxxxmax]

Closing without merge. This PR existed only to provide reproducible CI evidence for integration SHA 771cd9d6, which was going to be pinned by Pieverse-Eng/purrfect-claw-platform#1786.

The platform pointer PR has now been closed in favor of upgrading directly to the latest official NousResearch/hermes-agent version, so this integration branch is no longer a release input.