hermes-updates

Upgrade a live Hermes install and diagnose update drift: decide whether an update is worth a maintenance window, snapshot before mutation, run the official updater, and verify the runtime afterwards. Use for failed updates, stale unattended timers, dependency-sync gates, detached release checkouts, or post-update health checks. Not for model/provider configuration and not for editing the install's own source.