Let the Hermes package bootstrap native desktop updates

Install Hermes into its writable native layout instead of shipping a frozen /opt desktop. Preserve the native update path, migrate tagged bootstraps, and keep existing CLI launchers until the desktop is ready.

Co-Authored-By: GPT-6 Codex (xhigh) <noreply@openai.com>

.github/workflows/test.yml

@@ -16,6 +16,9 @@ jobs:
         with:
           persist-credentials: false
 
+      - name: Test Hermes installation and launch
+        run: python3 test/hermes-desktop-test.py
+
       # An Arch container for vercmp: version ordering has to be decided by
       # the same comparator pacman uses on users' machines.
       - name: Run self-tests