feat: Hermit 1.1.0 — HERMIT_* env, Tauri desktop shell

Wire hermit_getenv across the engine, rebrand WebUI/systemd/docs, and
add apps/desktop (Tauri 2 + React) with a DeepSeek-Harness-like UI.
Qt app/ is frozen; full libcstcore FFI is scaffolded behind --features engine.

Co-authored-by: Cursor <cursoragent@cursor.com>

scripts/hermit-parliament.service.in

@@ -0,0 +1,23 @@
+[Unit]
+Description=Hermit parliament seat service
+Documentation=https://git.whcself.xyz/WHC/Hermit
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=simple
+# Prefer --service-fg under systemd so the unit tracks the real process.
+ExecStart=@BIN@ --service-fg --peer-port ${HERMIT_PEER_PORT:-${CST_PEER_PORT:-9100}}
+Restart=on-failure
+RestartSec=3
+Environment=HERMIT_INSTANCE_ID=%H
+# Put the Realm password in a drop-in, e.g.:
+#   ~/.config/systemd/user/hermit-parliament.service.d/override.conf
+#   [Service]
+#   Environment=HERMIT_REALM_PASSWORD=…
+# CST_* still accepted. Config under ~/.config/hermit/ (legacy cst-agent/).
+EnvironmentFile=-%h/.config/hermit/parliament.env
+EnvironmentFile=-%h/.config/cst-agent/parliament.env
+
+[Install]
+WantedBy=default.target