fix(hermes): admit the Google Chat asset into the portable context

The Hermes portable build context walks every directory the Dockerfile
copies and rejects a file that its reviewed manifest does not name, so
the five files this branch adds under the Google Chat channel failed
installer-integration on the first one it reached.

Its Dockerfile parser also rejects a COPY that continues onto a second
line, which the new plugin-asset COPY did. Join that instruction, name
its source in the local COPY allowlist, and add the five files to the
reviewed manifest.

The parser and the reviewed manifest are the same two lists the gate
compares, so both had to move together. installer-integration clones
the pushed revision rather than the working tree, so this was verified
by running the parser against the working tree and by the unit suite
under src/lib/onboard/experimental, which builds its fixture from the
manifest.

Author: hunglp6d

agents/hermes/Dockerfile

@@ -80,8 +80,7 @@ FROM scratch AS hermes-agent-payload
 COPY agents/hermes/plugin/ /opt/nemoclaw-hermes-plugin/
 # Channel-owned Google Chat runtime asset, loaded by the plugin beside its own
 # __init__.py.
-COPY src/lib/messaging/channels/googlechat/runtime/hermes-adapter.py \
-    /opt/nemoclaw-hermes-plugin/googlechat_adapter.py
+COPY src/lib/messaging/channels/googlechat/runtime/hermes-adapter.py /opt/nemoclaw-hermes-plugin/googlechat_adapter.py
 COPY agents/hermes/generate-config.ts /opt/nemoclaw-hermes-config/generate-config.ts
 COPY agents/hermes/config/ /opt/nemoclaw-hermes-config/config/
 COPY agents/hermes/image-build-probes.py /opt/nemoclaw-hermes-config/image-build-probes.py

src/lib/onboard/experimental/hermes-portable-build-context-files.ts

@@ -204,7 +204,10 @@ export const HERMES_PORTABLE_BUILD_CONTEXT_FILES = [
   { path: "src/lib/messaging/channels/googlechat/hooks/tunnel-runtime.test.ts", mode: "100644" },
   { path: "src/lib/messaging/channels/googlechat/hooks/tunnel-runtime.ts", mode: "100644" },
   { path: "src/lib/messaging/channels/googlechat/manifest.ts", mode: "100644" },
+  { path: "src/lib/messaging/channels/googlechat/policy.test.ts", mode: "100644" },
+  { path: "src/lib/messaging/channels/googlechat/policy/hermes.yaml", mode: "100644" },
   { path: "src/lib/messaging/channels/googlechat/policy/openclaw.yaml", mode: "100644" },
+  { path: "src/lib/messaging/channels/googlechat/provider-profile/hermes.yaml", mode: "100644" },
   { path: "src/lib/messaging/channels/googlechat/provider-profile/openclaw.yaml", mode: "100644" },
   { path: "src/lib/messaging/channels/googlechat/rendered-config-parser.ts", mode: "100644" },
   { path: "src/lib/messaging/channels/googlechat/runtime-contract.test.ts", mode: "100644" },
@@ -224,6 +227,8 @@ export const HERMES_PORTABLE_BUILD_CONTEXT_FILES = [
     path: "src/lib/messaging/channels/googlechat/runtime/googlechat-trusted-proxy-fetch.ts",
     mode: "100644",
   },
+  { path: "src/lib/messaging/channels/googlechat/runtime/hermes-adapter.py", mode: "100644" },
+  { path: "src/lib/messaging/channels/googlechat/runtime/hermes-adapter.test.ts", mode: "100644" },
   { path: "src/lib/messaging/channels/googlechat/template-resolver.test.ts", mode: "100644" },
   { path: "src/lib/messaging/channels/googlechat/template-resolver.ts", mode: "100644" },
   { path: "src/lib/messaging/channels/googlechat/tunnel/lifecycle.test.ts", mode: "100644" },

src/lib/onboard/experimental/hermes-portable-build-context.ts

@@ -83,6 +83,7 @@ const LOCAL_COPY_SOURCES = [
   "src/lib/actions/sandbox/openshell-child-visible-credentials.v0.0.101.json",
   "src/lib/hermes-managed-route.ts",
   "src/lib/messaging/",
+  "src/lib/messaging/channels/googlechat/runtime/hermes-adapter.py",
   "src/lib/tool-disclosure.ts",
   "tools/mcp-tool-discovery-runtime/reviewed-runtime-bundle/managed-startup-image-runtime.bundle",
   "tools/mcp-tool-discovery-runtime/reviewed-runtime-bundle/mcp-tool-discovery/BUNDLED_PACKAGES.json",