No-secret-storage policy

No Heath `.env`, tokens, memories, sessions, passwords, private skills, or API keys are copied.
Customer credentials stay in the customer-owned local Hermes environment or provider OAuth/device flows.
The portal tracks install state, selected packs, and support incidents — not secrets.
Remote support requires explicit approval, time bounds, customer-visible actions, and revocation.