merge: lane/hermes-fixes-20260819 @ 863a379bbf — six security/robustness fixes (tooluse parser depth cap, 192 MiB body limit + clean 413, GIF decode-bomb bound, prompt_ids vocab check, capture.rs symlink guard, bare pod-id regex)