feat(hermes): add native lifecycle hooks

[beruro]

Problem

Hermes sessions do not currently report their native lifecycle through ORG2’s existing authenticated status pipeline, leaving external and integrated TUI sessions without authoritative lifecycle hooks.

Solution

• Add and enable the managed orgii-status Hermes plugin.
• Post privacy-safe lifecycle callbacks to the authenticated loopback server.
• Translate Hermes events into the existing AgentStatusEventV1 pipeline.
• Support external and integrated TUI sessions through ORGII_SESSION_ID.
• Validation: 8 Python tests, Python compile check, scoped Rust formatting/clippy, diff check, and GitHub CI.

Potential risks

• Hermes plugin/API changes could require lifecycle payload updates.
• Loopback availability and session-ID propagation remain external runtime dependencies.
• This PR deliberately excludes polling, UI, i18n, and historical merge content.