feat(hermes): add chromium for local browser tool

- Create custom Dockerfile extending nousresearch/hermes-agent with chromium installed
- Update compose.yml to build from local Dockerfile instead of pulling image
- Enables browser tool to work without Browserbase cloud service

ai/Dockerfile

@@ -1,23 +0,0 @@
-FROM debian:13.4
-
-# Install uv (Python package manager), curl, poppler-utils, and imagemagick
-RUN apt-get update && \
-    apt-get install -y --no-install-recommends \
-        curl \
-        poppler-utils \
-        imagemagick && \
-    rm -rf /var/lib/apt/lists/*
-
-# Install uv if not already present (debian:13.4 doesn't ship it)
-COPY --from=ghcr.io/astral-sh/uv:latest /usr/local/bin/uv /usr/local/bin/uv
-RUN uv --version
-
-# Verify all expected tools are available
-RUN curl --version && \
-    pdftotext -v 2>&1 | head -1 && \
-    pdfinfo -v 2>&1 | head -1 && \
-    pdftoppm -v 2>&1 | head -1 && \
-    convert --version | head -1 && \
-    identify --version | head -1
-
-CMD ["/bin/bash"]

ai/compose.yml

@@ -26,7 +26,9 @@ services:
       - "traefik.http.routers.webui-https.tls.certresolver=njalla"
 
   hermes:
-    image: nousresearch/hermes-agent:latest
+    build:
+      context: ./hermes
+      dockerfile: Dockerfile
     container_name: hermes
     restart: always
     # Gateway run enables the internal API server on port 8642

ai/hermes/Dockerfile

@@ -0,0 +1,10 @@
+FROM nousresearch/hermes-agent:latest
+
+# Install Chromium for browser tool
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    chromium \
+    && rm -rf /var/lib/apt/lists/* \
+    && apt-get clean
+
+# Set environment variable for Chromium path
+ENV CHROME_EXECUTABLE=/usr/bin/chromium

env/.env.example.paperclip

@@ -1,26 +0,0 @@
-# Paperclip Environment Variables
-# Copy this file to your .env (at the compose root or docker-compose working directory)
-# and fill in the secrets.
-#
-#   cp env/.env.example.paperclip .env
-#
-# Then reference it from compose.yml:
-#   env_file:
-#     - path: .env
-#       required: true
-
-# ---------------------------------------------------------------------------
-# Database
-# ---------------------------------------------------------------------------
-# PostgreSQL password for the paperclip-db service.
-# Generate a strong random password:
-#   openssl rand -base64 32
-PAPERCLIP_DB_PASSWORD=change_me_to_a_strong_random_password
-
-# ---------------------------------------------------------------------------
-# Authentication
-# ---------------------------------------------------------------------------
-# Secret key used by Better Auth for signing and verifying tokens.
-# Generate a strong random secret:
-#   openssl rand -base64 32
-PAPERCLIP_AUTH_SECRET=change_me_to_a_strong_random_secret