## Summary
- make NemoHermes default to a Hermes sandbox name and keep installer
next-step output tied to the actual onboard session
- prevent silent same-name cross-agent reuse while preserving
side-by-side OpenClaw and Hermes sandboxes under the shared OpenShell
gateway
- persist per-sandbox agent metadata/default selection on create and
reuse, make Hermes setup failures fatal, and add clearer
typo/command-order diagnostics
- show per-sandbox agent type in list output

Supersedes #2780, which was closed because the repository blocks
force-pushing the amended DCO-signed commit.

## Validation
- npm run build:cli
- npx vitest run test/install-preflight.test.ts test/cli.test.ts
test/onboard.test.ts src/lib/agent-onboard.test.ts
src/lib/inventory-commands.test.ts --maxWorkers=1
- npx vitest run test/nemohermes-alias.test.ts
- npx vitest run src/lib/inventory-commands.test.ts
src/lib/agent-onboard.test.ts
- git diff --check

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit

* **New Features**
* Inventory shows per-sandbox agent; CLI gives typo suggestions and
command-order hints; agent-aware sandbox naming and UI labels; installer
prefers and exposes user-local OpenShell; dashboard forwarding reduces
port collisions and restores agent forwards (Hermes-specific
restore/watch added).

* **Bug Fixes**
* Agent preflight verifies binaries and in-sandbox probes; fails fast on
unreachable gateways; blocks sandbox reuse on agent/image drift.

* **Tests**
* Expanded coverage across onboarding, installer helpers, OpenShell
resolution, Docker validation, CLI suggestions, and provisioning.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->