chore(deps): update nousresearch/hermes-agent docker tag to v2026.8.3

[github-actions]

This PR updates the Hermes agent image (pinned in internal/hermes/hermes.go and internal/serviceoffercontroller/agent_render.go).

What Changed

• Current Version: ``
• New Version: ``
• Change Type: 🟢 Patch

Release Notes

Pre-merge gate

• Run RELEASE_SMOKE_INCLUDE_OBOL=true bash flows/release-smoke.sh and confirm flow-16-sell-agent.sh passes — its §1.1.1/§1.3.1 steps gate against .no-bundled-skills marker regressions across Hermes releases, and agent-backed offers depend on the gateway streaming chunks per-write, a behavior owned by the Hermes image.

---

Auto-generated by Renovate Bot

[bussyjd]

Superseded by #817 — this commit is bundled into integration/v0.15.0-rc0, tagged v0.15.0-rc0. This was the highest-blast-radius item in the bundle (default agent runtime image, unit-tested only), so it now has runtime evidence: the smoke preloaded nousresearch/hermes-agent:v2026.8.3 into the cluster and both flow-04-agent and flow-16-sell-agent passed against it — the latter asserting the .no-bundled-skills contract inside the Hermes pod. Full receipts: #817 (comment). Closing in favour of the bundle.

[github-actions]

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update (v2026.8.3). You will get a PR once a newer version is released. To ignore this dependency forever, add it to the ignoreDeps array of your Renovate config.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.