Fix auxiliary fallback selection and enforce free OpenRouter models.

Persist Hermes advisory provider config and stop boot-time overwrites.

Wire OPENROUTER_ANALYSIS_MODEL into sync_hf fallback chains instead of hardcoded openrouter/free.

Use target.mkdir for fresh skill install paths in sync_hf.

Fix crash-loop in sync_hf skill install on fresh HERMES_HOME.

Deploy Hermes-native futures advisory migration and UI authority-contrast upgrade.

fix: auto-provision audit signing secret, log real futures_analyze failure reasons

fix: quiet expected startup noise (first-boot restore, secret-scan dedupe, aux provider fallback, default web backend)

fix: don't abort entire state backup on one secret-flagged file

Deploy: HermesFace finalized project to HF Space