feat: Hermit 1.1.0 — HERMIT_* env, Tauri desktop shell

Wire hermit_getenv across the engine, rebrand WebUI/systemd/docs, and
add apps/desktop (Tauri 2 + React) with a DeepSeek-Harness-like UI.
Qt app/ is frozen; full libcstcore FFI is scaffolded behind --features engine.

Co-authored-by: Cursor <cursoragent@cursor.com>

src/parliament.c

@@ -8,6 +8,7 @@
 #include "cst_util.h"
 #include "monocypher.h"
 #include "os_compat.h"
+#include "cst_hermit_glyph.h"
 
 #include <ctype.h>
 #include <stdio.h>
@@ -61,7 +62,7 @@ void cst_parliament_sync_ack(void) {
 int cst_parliament_default_instance(char *out, size_t n) {
   if (!out || n < 2)
     return -1;
-  const char *env = getenv("CST_INSTANCE_ID");
+  const char *env = hermit_getenv("INSTANCE_ID");
   if (env && env[0]) {
     snprintf(out, n, "%s", env);
     return 0;
@@ -647,7 +648,7 @@ int cst_parliament_is_active(void) {
    * Password Realm alone no longer forces parliament — that starved task /
    * worker_* / runtime tools. Opt in via CST_COLLABORATION / settings, or
    * when an open parliament meta already exists. */
-  const char *mode = getenv("CST_COLLABORATION");
+  const char *mode = hermit_getenv("COLLABORATION");
   if (mode && mode[0])
     return strcmp(mode, "parliament") == 0;
   cst_settings_t s;