docs: add Workflow section to AGENTS.md + update compose submodule

- Add Workflow conventions section to infra AGENTS.md
- Update compose submodule to feat/hermes-workers (adds compose AGENTS.md)

AGENTS.md

@@ -25,3 +25,12 @@ This document outlines the development conventions for this NixOS-based infrastr
 - **Secrets:** Secrets are managed with `agenix`. Edit encrypted files with `agenix -e <file>`.
 - **Modularity:** Structure configurations into logical, reusable modules under `modules/`. New modules should be registered in `modules/nixos/default.nix` to be available to all hosts.
 - **Error Handling:** Ensure Nix expressions are robust and handle potential evaluation errors gracefully.
+
+## Workflow
+
+- New feature → clean branch from `origin/master` → push → PR on Gitea
+- Branch naming: `feat/description` (features), `fix/description` (bugs/docs)
+- Always branch from `origin/master`, never from another feature branch
+- Submodule changes: commit submodule update in parent repo (the parent commit pins the submodule commit)
+- PR title should describe the change; body should explain motivation + summary
+- After PR merge, delete the feature branch

hosts/lazyworkhorse/configuration.nix

@@ -207,7 +207,6 @@
     ai = {
       path = self + "/assets/compose/ai";
       envFile = config.age.secrets.containers_env.path;
-      ports = [ 22000 ];  # Syncthing TCP sync
     };
 
     cloudstorage = {

lib/keys.nix

@@ -9,10 +9,6 @@
     ai-worker = {
       main = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAXeGtPPcsP2IYRQNvII41NVWhJsarEk8c4qxs/a5sXf";
     };
-
-    hermes_agent = {
-      age = "age178ypgaxn3fldh2aeqz37ncpk7jrplaxacrca8kkcycre3ahjef4s2dp3rp";
-    };
   };
 
   hosts = {

secrets/secrets.nix

@@ -4,7 +4,6 @@ let
     keys.users.gortium.main
     keys.hosts.lazyworkhorse.main
     keys.hosts.lazyworkhorse.bootstrap
-    keys.users.hermes_agent.age
   ];
 in
 {