docs(hermes): sync config backup with live post alias-rename propagation

Live config was still routing on pre-rename aliases (frank-default-large,
frank-default-small) after the 2026-09-03 frank-large/frank-small/frank-npu
rename cutover; hermes-webui resolved those ids to nonexistent models and
requests failed. Live config fixed in place (backup kept on-host as
config.yaml.bak-20260905); this backup now mirrors the live shape: named
providers for aux routes, title_generation/triage/kanban routed to their
actual models, moa + mcp sections, signal disabled.

dankclaw/hermes/config.yaml.example

@@ -1,6 +1,6 @@
 # Hermes configuration backup / non-secret baseline.
 #
-# Source on Dankclaw: /home/dank/hermes-data/config.yaml
+# Source on Dankclaw: /home/dank/Containers/hermes/data/config.yaml
 # This file is a sanitized Git backup, not a complete replacement for the
 # live Hermes state. Do not add dashboard password hashes, phone numbers,
 # OAuth credentials, API keys, sessions, memories, or generated state here.
@@ -32,26 +32,46 @@ providers:
       gemma4-it:e4b:
         context_length: 131072
 
-# Auxiliary routing from the live configuration. These use the existing
+# Auxiliary routing from the live configuration. Named providers route via
-# custom endpoint shape and are retained here as a settings backup.
+# their `api:` URL; `custom` entries route by their explicit `base_url`.
 auxiliary:
-  vision: {provider: dankclaw-npu, model: gemma4-it:e4b, base_url: http://192.168.0.143:7771/v1}
+  vision: {provider: dankclaw-npu, model: gemma4-it:e4b}
-  web_extract: {provider: custom, model: frank-small, base_url: http://192.168.0.235:7770/v1}
+  web_extract: {provider: dankserver-small, model: frank-small}
-  compression: {provider: custom, model: frank-small, base_url: http://192.168.0.235:7770/v1}
+  compression: {provider: dankserver-small, model: frank-small}
-  skills_hub: {provider: custom, model: frank-small, base_url: http://192.168.0.235:7770/v1}
+  skills_hub: {provider: dankserver-small, model: frank-small}
-  approval: {provider: custom, model: frank-small, base_url: http://192.168.0.235:7770/v1}
+  approval: {provider: dankserver-small, model: frank-small}
-  mcp: {provider: custom, model: frank-small, base_url: http://192.168.0.235:7770/v1}
+  mcp: {provider: dankserver-small, model: frank-small}
-  title_generation: {provider: custom, model: frank-small, base_url: http://192.168.0.235:7770/v1}
+  title_generation: {provider: dankclaw-npu, model: gemma4-it:e4b}
   memory_query_rewrite: {provider: custom, model: frank-small, base_url: http://192.168.0.235:7770/v1}
   tts_audio_tags: {provider: custom, model: frank-small, base_url: http://192.168.0.235:7770/v1}
-  triage_specifier: {provider: custom, model: frank-small, base_url: http://192.168.0.235:7770/v1}
+  triage_specifier: {provider: dankclaw-large, model: frank-large}
-  kanban_decomposer: {provider: custom, model: frank-small, base_url: http://192.168.0.235:7770/v1}
+  kanban_decomposer: {provider: dankclaw-large, model: frank-large}
-  profile_describer: {provider: custom, model: frank-small, base_url: http://192.168.0.235:7770/v1}
+  profile_describer: {provider: dankserver-small, model: frank-small}
-  curator: {provider: custom, model: frank-small, base_url: http://192.168.0.235:7770/v1}
+  curator: {provider: dankserver-small, model: frank-small}
 
 dashboard:
   # basic_auth intentionally omitted; its password_hash remains live-only.
   font: atkinson-hyperlegible
+moa:
+  presets:
+    default:
+      reference_models:
+        - provider: openrouter
+          model: deepseek/deepseek-v4-pro
+          enabled: false
+      degraded_reference_policy: loud
+      fanout: user_turn
+  reference_models:
+    - provider: openrouter
+      model: deepseek/deepseek-v4-pro
+      enabled: false
+  aggregator:
+    provider: openrouter
+    model: anthropic/claude-opus-4.8
+  degraded_reference_policy: loud
+  max_tokens: 4096
+  fanout: user_turn
+  enabled: true
 skills:
   disabled: []
 onboarding:
@@ -60,5 +80,15 @@ onboarding:
 _config_version: 34
 platforms:
   signal:
-    enabled: true
+    # Live config has the Signal adapter disabled; http_url points at the
-    # extra.http_url and account intentionally omitted from the backup.
+    # host signal-cli daemon. The account phone number stays live-only.
+    enabled: false
+    extra:
+      http_url: http://192.168.0.143:8080
+mcp_servers:
+  chrome-devtools:
+    command: /usr/local/bin/npx
+    args:
+      - -y
+      - chrome-devtools-mcp@latest
+      - --browserUrl=http://127.0.0.1:9222