Update hermes-desktop to 2026.9.7

pkgbuilds/hermes-desktop/runtime.patch

@@ -1,11 +1,13 @@
 --- a/scripts/desktop-update/posix.sh
 +++ b/scripts/desktop-update/posix.sh
-@@ -317,6 +317,8 @@
+@@ -327,6 +327,10 @@
+   sb="$unpacked/chrome-sandbox"
    if [ ! -e "$sb" ]; then GATE=relaunch; return; fi
    if [ -u "$sb" ] && [ "$(stat -c %u "$sb" 2>/dev/null)" = "0" ]; then GATE=relaunch; return; fi
- 
++  # Namespace sandbox usable => Electron never consults the setuid helper,
++  # so a non-root chrome-sandbox does not block relaunch (mirrors the
++  # _desktop_linux_userns_sandbox_available() probe in hermes_cli/main.py).
 +  if unshare --user --map-root-user true 2>/dev/null; then GATE=relaunch; return; fi
-+
+
    case "${ELECTRON_DISABLE_SANDBOX:-}" in 1|true|TRUE|True) GATE=relaunch; return ;; esac
    [ "$SANDBOX_FALLBACK" -eq 1 ] && { GATE=relaunch; return; }
-   for arg in ${RELAUNCH_ARGS[@]+"${RELAUNCH_ARGS[@]}"}; do