hermes: add supervised dashboard-cathou service (:9120, own identity). Second s6 service reusing the main dashboard machinery, mounted read-only; env injected in compose. Runs the command directly to dodge the with-contenv env reset that would collapse it to the main service identity.

ai/compose.yml

@@ -23,9 +23,12 @@ services:
     - ROCR_VISIBLE_DEVICES=0,1
     - HSA_ENABLE_SDMA=0
     - TZ=America/Montreal
+    - CATHOU_SERVE_PASSWORD=${CATHOU_SERVE_PASSWORD:?must be set}
+    - CATHOU_SERVE_SECRET=${CATHOU_SERVE_SECRET:?must be set}
     volumes:
     - /mnt/HoardingCow_docker_data/Hermes/data:/opt/data
     - /mnt/HoardingCow_docker_data/Hermes/Syncthing/ExoKortex:/opt/data/ExoKortex
+    - ./s6/dashboard-cathou:/etc/s6-overlay/s6-rc.d/dashboard-cathou:ro
     devices:
     - /dev/kfd:/dev/kfd
     - /dev/dri:/dev/dri