feat: bake Matrix bridge deps into Docker image instead of volume mount

ai/hermes/Dockerfile

@@ -51,6 +51,12 @@ RUN . /opt/hermes/.venv/bin/activate && \
 
 WORKDIR /opt/hermes
 
+# ---------- Matrix bridge + extra pip deps ----------
+# Previously installed inline at container startup and persisted via volume mount.
+# Now baked into the image so the fragile venv volume mount can be removed.
+RUN . /opt/hermes/.venv/bin/activate && \
+    uv pip install --no-cache-dir 'mautrix[encryption]' openai
+
 # ---------- Piper TTS ----------
 RUN . /opt/hermes/.venv/bin/activate && \
     uv pip install --no-cache-dir piper-tts sounddevice numpy && \