hal0 v0.8.2b4

Documentation and installer hygiene — no runtime behaviour change. This
release re-baselines the engineering docs to the current v0.8.x reality
(container runtime, Hindsight memory, agent/utility roles) and fixes a
handful of installer drift bugs surfaced by a codebase assessment sweep.
Safe upgrade from v0.8.2b3.

Changed

• Docs re-baselined to v0.8.x. Swept the Lemonade→container-runtime and
  Cognee→Hindsight terminology out of AGENTS.md, ARCHITECTURE.md,
  CONTEXT.md, PLAN.md, and README.md; corrected the Hermes provisioner
  to its real 15-phase pipeline; refreshed version/status lines; and rewrote the
  (largely fictional) hal0-service-management codebase-map reference against
  the current src/hal0/ tree. Marked the shipped Stacks and voice-stack
  superpowers plans as completed.
• Dead ADR links fixed. Tracked docs no longer link into the gitignored
  docs/internal/adr/ tree (#638); surviving decisions are inlined and ADRs are
  referenced by number. (In-code citation sweep tracked in #984.)

Fixed

• qwen3tts migration script aligned with the tts-slot model. The
  standalone-to-slot migration script's Guard 1 checked a non-existent
  qwen3tts slot (always 404) and Guard 3 checked a removed kokoro :8084
  fallback; both are corrected to the deployed design where Qwen3-TTS serves
  from the canonical tts slot via voice.tts. (#979)
• uninstall.sh now removes all three sudoers grants. It only removed
  hal0-benchctl, leaking hal0-agentenv and hal0-comfyui behind on uninstall.
• Hermes private memory bank seeded under its canonical name. install.sh
  seeded private__hermes-agent, which the server (which derives the bank from the
  agent-id via PRIVATE_PREFIX="private:") never matches — corrected to
  private:hermes so the pre-seeded retain-mission/dispositions actually apply.
• Dropped the obsolete Lemonade boot-contention comment from
  installer/comfyui/scripts/comfy-up.sh.