feat: correlate Hermes plugin audit IDs

[peg]

Summary

• Send Hermes tool_call_id as top-level Rampart evaluation metadata so audits correlate with the exact Hermes tool call.
• Include Rampart audit_id in Hermes plugin deny/approval-required block messages when available.
• Update the experimental Hermes integration docs and plugin manifest version to reflect audit-correlation behavior and current hosted-approval boundaries.

Tests

• python3 -m unittest internal/plugin/hermes/test_hermes_plugin.py
• go test ./internal/plugin/hermes ./cmd/rampart/cli
• git diff --check
• go test ./...