hermes: add supervised dashboard-cathou service (:9120, own identity). Second s6 service reusing the main dashboard machinery, mounted read-only; env injected in compose. Runs the command directly to dodge the with-contenv env reset that would collapse it to the main service identity.

ai/s6/dashboard-cathou/finish

@@ -0,0 +1,4 @@
+#!/command/with-contenv sh
+# Always restart on exit (exit != 125). Crash-loop with a bad auth
+# config is the intended fail-closed signal.
+exit 0