feat: add Hermes Workspace compose service

- Update compose submodule to feat/hermes-workspace
- Adds Hermes Workspace web UI (chat, memory, skills, terminal,
  multi-agent swarm orchestration) alongside existing Hermes
- Dashboard enabled via HERMES_DASHBOARD=1 on port 9119
- Workspace at workspace.lazyworkhorse.net:3000

AGENTS.md

@@ -25,12 +25,3 @@ This document outlines the development conventions for this NixOS-based infrastr
 - **Secrets:** Secrets are managed with `agenix`. Edit encrypted files with `agenix -e <file>`.
 - **Modularity:** Structure configurations into logical, reusable modules under `modules/`. New modules should be registered in `modules/nixos/default.nix` to be available to all hosts.
 - **Error Handling:** Ensure Nix expressions are robust and handle potential evaluation errors gracefully.
-
-## Workflow
-
-- New feature → clean branch from `origin/master` → push → PR on Gitea
-- Branch naming: `feat/description` (features), `fix/description` (bugs/docs)
-- Always branch from `origin/master`, never from another feature branch
-- Submodule changes: commit submodule update in parent repo (the parent commit pins the submodule commit)
-- PR title should describe the change; body should explain motivation + summary
-- After PR merge, delete the feature branch

hosts/lazyworkhorse/configuration.nix

@@ -207,6 +207,7 @@
     ai = {
       path = self + "/assets/compose/ai";
       envFile = config.age.secrets.containers_env.path;
+      ports = [ 22000 ];  # Syncthing TCP sync
     };
 
     cloudstorage = {