hermes-webui: add Hermex server as loopback compose service on Dankclaw

- compose: hermes-webui runs bootstrap.py --foreground in the agent image,
  shares /home/dank/hermes-data (same uid mapping as the gateway), publishes
  127.0.0.1:8787 only; password from host .env
- planner/remote deployer: hermes-webui is an isolated Dankclaw service
- tests: deployment integrity seam (loopback, auth, volume, healthcheck,
  planner narrowing, deployer dispatch)
- docs: Hermes-WebUI page with the iOS SSH-tunnel access pattern

docs/Dankclaw/Hermes.md

@@ -45,6 +45,8 @@ both containers. The tracked, sanitized configuration baseline is
 
 ## See Also
 
+- [[Hermes-Dashboard]] — the LAN browser management UI
+- [[Hermes-WebUI]] — the Hermex server (phone-facing API, SSH-tunneled)
 - [[Dankclaw Stack]]
 - [[OpenWebUI]] — the chat UI that pairs with Hermes
 - Knowledge base: [[SearXNG]] (Hermes as the search agent)