Hermes container ↔ vault sync

Hermes Agent (Docker container) has a working clone of this vault at /opt/data/obsidian-vault.

Remote: https://git.gutcanet.duckdns.org/agutca/obsidian-vault.git (HTTPS — SSH :2222 not forwarded)
Auth: Gitea PAT hermes-container (scope: write:repository), stored as GITEA_TOKEN in /opt/data/.env
Credential helper: configured in the repo's local .git/config, reads token from .env
Flow: screenshot → OCR → write note → git pull --rebase → commit → push → Obsidian Git plugin pulls here within 15 min
Commit identity: Hermes Agent <hermes@agent.local> (distinct from Gutca's own commits)

First write test: 2026-08-10.