Suppress Hermes runtime status in chat

[mostlydev]

Summary

• refresh hermes-base to upstream Hermes v2026.6.19 and publish ghcr.io/mostlydev/hermes-base:v2026.6.19-claw.2
• keep managed Hermes chat status callbacks and background-review summaries out of content channels by default, with opt-in knobs for debug surfaces
• rebase Clawdapus Hermes runtime patches onto the upstream module split and update docs/site/changelog

Verification

• go test ./...
• go vet ./...
• go test -tags spike -run TestSpikeHermesBaseImageContract ./cmd/claw
• npm run build (site)
• docker buildx imagetools inspect ghcr.io/mostlydev/hermes-base:v2026.6.19-claw.2
• gh api /users/mostlydev/packages/container/hermes-base --jq "{name, visibility, updated_at}"
• go run ./scripts/check-release-infra-tags --release-tag v0.23.1

Closes #257
Closes #259