feat: distribute managed Hermes patches

[gnezim]

Summary

• add a bundled managed-patch registry alongside the existing local registry
• ship the Telegram hidden-link patch tied to its upstream PR lifecycle
• let same-named local patch pairs override bundled assets
• keep bundled patches immutable during 3-way application
• include bundled assets in workflow freshness checks and documentation
• drop the unrelated custom Telegram Bot API NO_PROXY patch; Thunder Forge bypass is configured in the local Hermes .env instead

Validation

• bash syntax checks pass for all workflow scripts
• the hidden-link patch remains applied in the live Hermes checkout
• its focused regression test passes
• Thunder Forge proxy resolution returns direct after loading the local Hermes .env
• git diff --check passes

Upstream tracking

• Telegram hidden links: fix(telegram): hidden text-link URLs reach the agent inline (#31071, salvage #74769) NousResearch/hermes-agent#93346

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 99f5e36f-fb1e-4fa1-8a62-e9446476b530

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}