docs(hermes): add CI Sweeper example

[shixi-li]

Summary

• add a copy-pasteable Hermes CI Sweeper example using hermes cron, the shared ci-triage skill, and the shared state template
• keep week one strictly report-only, with explicit early-exit, classification, state, escalation, and external-write guardrails
• document the human-gated week-two path through isolated worktrees and an independent verifier
• add Hermes CI Sweeper coverage to both example indexes

Safety model

The default job uses --deliver local and cannot edit code or workflows, create branches/PRs, retry CI, mutate GitHub state, or merge. Security, release, secrets, permissions, infrastructure, and ambiguous failures escalate to a human. L2 fixes require a human-approved failure, paths, and test command; they stop after three attempts and never auto-merge.

Validation

• targeted file, relative-link-target, and index-cell assertions
• git diff --check
• bash scripts/ci-validate-gates.sh
• bash scripts/ci-audit-gates.sh

Fixes #387

[github-actions]

Thanks @shixi-li for contributing a tool example — visible, reviewable PRs like this grow the reference for everyone.

What happens next

• Maintainer aims for same-day review on story, adopter, and scoped docs/example PRs (CONTRIBUTING.md).
• good first issue PRs: comment on the linked issue so we can assign and close on merge.

More ways to help

• Contributor quickstart + open issues
• Good first issue backlog

— loop-engineering maintainers