fix: migrate hardcoded ~/.hermes paths to HERMES_HOME resolution (#835)

- tools/session_templates.py: use get_hermes_home() for template dir and state.db
- tools/credential_redact.py: use get_hermes_home() for HERMES_HOME base
- agent/context_budget.py: use get_hermes_home() for checkpoints dir
- tools/crisis_tool.py: use HERMES_HOME env var with fallback for crisis log path
- tools/hardcoded_path_guard.py: add noqa to example docstring lines
- scripts/lint_hardcoded_paths.py: exclude lines already referencing HERMES_HOME

Also fixes a pre-existing SyntaxError in credential_redact.py caused by
raw strings with escaped quotes inside double-quoted literals.

scripts/lint_hardcoded_paths.py

@@ -56,7 +56,7 @@ VIOLATIONS = [
         "id": "expanduser-hermes",
         "name": "os.path.expanduser ~/.hermes (non-fallback)",
         "pattern": r'os\.path\.expanduser\(["\']~/.hermes',
-        "exclude_with": r'#',
+        "exclude_with": r'#|HERMES_HOME',
         "message": "Use `os.environ.get('HERMES_HOME', os.path.expanduser('~/.hermes'))` instead",
     },
 ]