feat(hermes): replace Dockerfile with python:3.11-slim based image with Chromium

ai/Dockerfile

@@ -15,8 +15,10 @@ ENV PLAYWRIGHT_BROWSERS_PATH=/opt/hermes/.playwright
 RUN apt-get update && \
     apt-get install -y --no-install-recommends \
         build-essential nodejs npm python3 ripgrep ffmpeg gcc python3-dev libffi-dev procps git openssh-client docker-cli tini \
-        curl poppler-utils imagemagick \
-        chromium xvfb fonts-noto-color-emoji fonts-unifont fonts-liberation fonts-ipafont-gothic fonts-wqy-zenhei fonts-tlwg-loma-otf fonts-freefont-ttf \
+        curl poppler-utils imagemagick emacs-nox qemu-user-static binfmt-support qemu-user-binfmt && \
+        texlive-latex-base texlive-latex-extra texlive-fonts-recommended texlive-xetex texlive-science \
+        chromium xvfb \
+        fonts-noto-color-emoji fonts-unifont fonts-liberation fonts-ipafont-gothic fonts-wqy-zenhei fonts-tlwg-loma-otf fonts-freefont-ttf \
         libasound2t64 libatk-bridge2.0-0t64 libatk1.0-0t64 libatspi2.0-0t64 libcairo2 libcups2t64 libdbus-1-3 libdrm2 libgbm1 libglib2.0-0t64 libnspr4 libnss3 libpango-1.0-0 libx11-6 libxcb1 libxcomposite1 libxdamage1 libxext6 libxfixes3 libxkbcommon0 libxrandr2 && \
     rm -rf /var/lib/apt/lists/*
 

ai/hermes/entrypoint.sh

@@ -0,0 +1,20 @@
+#!/bin/bash
+set -e
+
+# Hermes Agent entrypoint script
+# Installs custom tools and runtime dependencies,
+# then delegates to the passed command (usually "gateway run").
+
+# Install custom tools from persistent volume if available
+if [ -f /opt/data/hermes-tools/install.sh ]; then
+    bash /opt/data/hermes-tools/install.sh
+fi
+
+# Install additional runtime deps (idempotent)
+if command -v uv &>/dev/null; then
+    uv pip install --system --no-cache-dir --quiet \
+        openai mautrix[encryption] 2>/dev/null || true
+fi
+
+# Execute the passed command with tini for proper signal handling
+exec tini -g -- "$@"

dashi/compose.yml

@@ -1,14 +0,0 @@
-services:
-  dashi:
-    image: jamjnsn/dashi:latest
-    container_name: dashi
-    expose:
-      - "8000"
-    restart: unless-stopped
-    networks:
-      - dashi_net
-
-networks:
-  dashi_net:
-    driver: bridge
-    name: dashi_net

network/compose.yml

@@ -41,7 +41,6 @@ services:
       - passman_net
       - tak_net
       - vc_net
-      - dashi_net
 
   ddns-updater:
     image: qmcgaw/ddns-updater
@@ -115,9 +114,6 @@ networks:
   vc_net:
     external: true
     name: vc_net
-  dashi_net:
-    external: true
-    name: dashi_net
 
   # duckdns:
   #   environment: