Move Hermes config into volume, add pre-deploy sync check

Config.yaml was bind-mounted, blocking runtime writes (/sethome).
Move it into the Docker volume via docker cp instead. Add
hermes-sync Makefile target that diffs remote config against local
before deploying, to catch runtime changes.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

infra/hermes/config.yaml

@@ -1,10 +1,9 @@
 model:
   provider: openrouter
   default: openrouter/auto
-
 memory:
   memory_enabled: true
   user_profile_enabled: true
-
 agent:
-  max_turns: 70
+  max_turns: 70
+TELEGRAM_HOME_CHANNEL: '8455090116'