feat(hermes): map session-inbox-monitor as pending + close install/hermes-mapping

session-inbox-monitor-hermes-mapping -> done: added to hermes/mapping.yaml
pending section, mode:pending + intended {auto, productivity} (mirrors the
session-handoff sibling). Reason cites the settings.json mutation, the OS
process kills, and the Windows-PowerShell hook needing a Linux port for Hermes.
Schema version untouched (schema, not content). YAML validated (32 skills).

session-inbox-monitor-install -> done: install.ps1 -Names session-inbox-monitor,
byte-identical (diff 0), v0.2.1; activation confirmed live this session (harness
picked the skill into available-skills with full description, no /reload-plugins).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

hermes/mapping.yaml

@@ -138,7 +138,7 @@ skills:
     mode: skip
     reason: "Claude-Code-only orchestrator — Hermes uses hermes-installer-skill instead."
 
-  # ─── pending (7 — behavioral audit required) ─────────────────────────
+  # ─── pending (8 — behavioral audit required) ─────────────────────────
 
   delegate-task:
     mode: pending
@@ -188,3 +188,10 @@ skills:
       mode: auto
       category: mcp
     reason: "Orchestrates the board claim/close/update/heartbeat cycle via mcp__projects-meta__tasks_claim_next / tasks_close / tasks_update / tasks_heartbeat (cross-session claim ownership, irreversible close, Gitea side-effects) and may arm a single long ScheduleWakeup for the explicit long-watch opt-in. Critical-infra-adjacent — touches the same claim/close machinery the unattended poller relies on. Behavioral audit via task-loop-test-trigger required before promotion to auto."
+
+  session-inbox-monitor:
+    mode: pending
+    intended:
+      mode: auto
+      category: productivity
+    reason: "Paired SessionStart hook registers itself in ~/.claude/settings.json and sweeps orphaned monitor OS processes (Get-CimInstance | Stop-Process by sentinel+inbox-path); the skill then raises an in-session Monitor on .claude-inbox/. Machine-level side-effects (user-config mutation + process kills) and a Windows-PowerShell hook that needs a Linux port for Hermes factory machines. Primary activation is the CLAUDE.md trigger-line `inbox monitor: raise on start` + the injector, not a hermes-trigger. Behavioral audit via session-inbox-monitor-test-trigger required before promotion to auto."