hermes - 💡(How to fix) Fix Roadmap: add a permissions and security policy model

Summary

Add a permission and security model for tools, plugins, gateways, cron jobs, local commands, filesystem access, network access, and secrets.

Proposed scope

• Add per-tool permission prompts and reusable trust decisions.
• Define trust levels for interactive, unattended, cron, and gateway contexts.
• Support filesystem allowlists and network/domain allowlists.
• Audit secret access and expose relevant events in logs/diagnostics.
• Classify dangerous commands and require stronger confirmation where appropriate.
• Require plugin permission declarations.
• Provide policy profiles such as personal, team, production, and restricted.

Acceptance criteria

• Unattended and gateway executions can run under stricter policies than interactive CLI sessions.
• Tool/plugin access is explainable before execution.
• Security decisions are logged in a way operators can audit.