terra: finish removing Hermes Agent (module import + secrets)

Follow-up to e5ba1bf — that commit only staged the deleted module file.
Drops the flake module import, opencode_go_api_key/telegram_bot_token
secrets, and the stale hermes-agent.nix cross-reference in ollama's
context_length comment.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

flake.nix

@@ -33,7 +33,7 @@
     };
     authentik-nix.url = "github:nix-community/authentik-nix";
     nix-flatpak.url = "github:gmodena/nix-flatpak";
-    # Hermes Agent (see services/desktop/hermes-agent.nix) — Tier 2 platform
+    # Hermes Agent (see hosts/jupiter/hermes-agent.nix) — Tier 2 platform
     # per its own docs (best-effort Nix support, can break on any upstream
     # commit), so pinned like everything else via flake.lock rather than
     # followed loosely.
@@ -111,7 +111,6 @@
             sops-nix.nixosModules.sops
             home-manager.nixosModules.home-manager
             inputs.nix-flatpak.nixosModules.nix-flatpak
-            inputs.hermes-agent.nixosModules.default
             ./hosts/terra/configuration.nix
           ];
         };

hosts/terra/configuration.nix

@@ -18,7 +18,6 @@ in
     ../../services/desktop/desktop-hyprland.nix
     ../../services/desktop/desktop-apps.nix
     ../../services/desktop/librechat.nix
-    ../../services/desktop/hermes-agent.nix
   ];
 
   networking.hostName = "terra";
@@ -98,10 +97,9 @@ in
     loadModels = [ "gemma4:12b" "qwen3.6:35b-a3b" ];
     # Ollama truncates context far below the model's real window unless
     # told otherwise (the OpenAI-compat /v1 route it's reached through has
-    # no way to set this per-request — see services/desktop/hermes-agent.nix,
-    # which points at this server and mirrors the same number in
-    # model.context_length). 131072 chosen as the practical ceiling after
-    # load-testing with real prompts, not just idle `ollama ps` checks:
+    # no way to set this per-request). 131072 chosen as the practical
+    # ceiling after load-testing with real prompts, not just idle
+    # `ollama ps` checks:
     # 32768 (31.6k-token prompt) and 65536 (40.8k-token prompt) both stayed
     # 100% GPU with VRAM barely moving (~10.1G / ~10.67G of 16G) — KV cache
     # cost barely grows with context, likely sliding-window/local attention

secrets/terra.yaml

@@ -25,7 +25,7 @@ sops:
             sHjKfw8VrrmAR4pQf1dsY+wcyh4FsZxhP3Q+QIVq3eCIXS9PeJkGAg==
             -----END AGE ENCRYPTED FILE-----
           recipient: age1rfcmu6zh40v4260l9hnf8ajs9vly0s06rx3ey76eu78dp9t7getqyhmkut
-    lastmodified: "2026-08-17T21:14:30Z"
-    mac: ENC[AES256_GCM,data:vbD0W0zN5WV4UonOWreZWvUrAP7A/PllGxTS29L0qSc8HdV+IzVtHfknl3QSrAx1cAgd0exz1mr2yVsBX5Ez4rzdyXO63KE1uwT/A5ZdZW8iEv/HP4I1dxuDN0U2nd5aFxAFqckYXQd24u/2JKZhtiwOG9QHlwm5bAr8+7o3r2k=,iv:BZ/8m4Gsbj/eg77qbcTFe7e6wqEBH2NVON/4zH74yAM=,tag:WumJmaIcIhm4nyouLGf7og==,type:str]
+    lastmodified: "2026-08-19T20:48:49Z"
+    mac: ENC[AES256_GCM,data:YbsOhLmzynV7S86A9w1XqDEe1/soZPewSrsc+5eR49naQNHUrv2j40J271hMh7r2c+gBZkkHAvq/tQy4USaWPdVn44h6+fPYc11lSlfuIGeIDX6KuXcIw4PdrJr5NgHpQ6+l5XASO0vKOifdqUxENEL8Uu5QJflgg6dA+y6RU94=,iv:ZALmRHzSFx9wzgapZVd27/JRCdTYzVdQsqs0eO9+6ko=,tag:9Un6iiPTxy61yNlms+K8Uw==,type:str]
     unencrypted_suffix: _unencrypted
     version: 3.13.2