init: Hermes config, skills, memories, cron

Sovereign backup of all Hermes Agent configuration and data.
Excludes: secrets, auth tokens, sessions, caches, code (separate repo).

Tracked:
- config.yaml (model, fallback chain, toolsets, display prefs)
- SOUL.md (Timmy personality charter)
- memories/ (persistent MEMORY.md + USER.md)
- skills/ (371 files — full skill library)
- cron/jobs.json (scheduled tasks)
- channel_directory.json (platform channels)
- hooks/ (custom hooks)

.gitignore

@@ -0,0 +1,56 @@
+# ── Hermes Config Repo ────────────────────────────────────────────────
+# Track: config, skills, memories, hooks, cron jobs, channel directory
+# Exclude: secrets, tokens, ephemeral state, caches, the code repo
+
+# ── Code repo (tracked separately as sovereign fork) ──────────────────
+hermes-agent/
+
+# ── Secrets & auth (NEVER commit) ────────────────────────────────────
+.env
+.env.*
+auth.json
+auth.lock
+gitea_token
+*.key
+*.pem
+
+# ── Ephemeral state ──────────────────────────────────────────────────
+state.db
+state.db-shm
+state.db-wal
+gateway.pid
+processes.json
+interrupt_debug.log
+.tirith-install-failed
+
+# ── Sessions (large, transient, privacy-sensitive) ───────────────────
+sessions/
+
+# ── Caches (regeneratable) ───────────────────────────────────────────
+audio_cache/
+document_cache/
+image_cache/
+temp_vision_images/
+images/
+sandboxes/
+
+# ── Shell history ────────────────────────────────────────────────────
+.hermes_history
+
+# ── Logs (large, rotated) ────────────────────────────────────────────
+logs/
+
+# ── Platform pairing state (contains rate limits, approval tokens) ───
+pairing/
+
+# ── WhatsApp session state ───────────────────────────────────────────
+whatsapp/
+
+# ── Cron output (regenerated) ────────────────────────────────────────
+cron/output/
+
+# ── Binaries ─────────────────────────────────────────────────────────
+bin/
+
+# ── OS junk ──────────────────────────────────────────────────────────
+.DS_Store