[scope:core] Hermes command allowlist (config.yaml) includes systemctl --user...¶

[scope:core] Hermes command allowlist (config.yaml) includes systemctl --user (prefect-worker, prefect-server) and sudo systemctl (bio-bridge-scheduler) — no approval needed for service management. prefect deploy --all also allowlisted.