init: clean history with no PII

Toto repo ma novou cistou historii (1 commit). Predchozi historie
byla smazana, protoze obsahovala osobni udaje (IP, emaily, hesla,
klice, tokeny, Volume cesty). Soubory v aktualnim commit uz tyto
udaje neobsahuji (nahradeno placeholdery <server-ip>, CHANGE_ME,
admin@example.com atd.).

Pokud chces zpet kompletni seznam starych commitu, mas je ve svem
lokalnim working tree - git log --all ukaze prazdno (protoze jsme
smazali .git/ a zacali znovu).

hermes-config.example.yml

@@ -0,0 +1,69 @@
+# Hermes Agent – ukazkova konfigurace
+# Zkopiruj na ~/.config/hermes/config.yml a dopln
+
+# AI provider a model
+provider: anthropic
+model: claude-sonnet-4.5
+api_key: ${HERMES_API_KEY}
+
+# Pracovni adresare
+workspace: ~/Skripty
+memory_dir: ~/.hermes/memory
+projects_dir: ~/git-repos
+
+# Sandbox – bezpecnostni omezeni
+sandbox:
+  enabled: true
+  allow:
+    - "ls"
+    - "cat"
+    - "grep"
+    - "find"
+    - "git"
+    - "docker"
+    - "docker compose"
+    - "kubectl"
+    - "ssh"
+    - "scp"
+    - "rsync"
+    - "curl"
+    - "jq"
+  deny:
+    - "rm -rf /"
+    - "rm -rf /*"
+    - "dd if="
+    - "mkfs"
+
+# Integrace s existujicimi sluzbami
+integrations:
+  gitea:
+    url: http://CHANGE_ME:3000
+    token_name: "gitea:api:CHANGE_ME"
+  docker:
+    socket: /var/run/docker.sock
+  ssh:
+    default_user: deploy
+    default_key: ~/.ssh/id_ed25519
+
+# Vystup
+output:
+  format: markdown
+  streaming: true
+  language: cs
+  color: true
+
+# UI
+ui:
+  theme: dark
+  icons: emoji
+  spinner: dots
+
+# Bezpecnost
+security:
+  audit_log: true
+  require_approval_for:
+    - "rm"
+    - "docker system prune"
+    - "kubectl delete"
+    - "git push --force"
+  api_key_storage: keychain  # macOS keychain