refactor: switch openclaw and hermes to their official images

hermes/.env.example

@@ -2,9 +2,14 @@
 #
 #   cp .env.example .env
 
-# Web UI login password.
-# Generate one with: openssl rand -base64 24
-HERMES_WEBUI_PASSWORD=
+# Full public URL of the dashboard, e.g. https://hermes.example.com.
+HERMES_DASHBOARD_PUBLIC_URL=https://hermes.example.com
+
+# Dashboard login. Generate the password with: openssl rand -base64 24
+HERMES_DASHBOARD_USERNAME=hermes
+HERMES_DASHBOARD_PASSWORD=
+# Signs dashboard sessions; keep it stable. Generate with: openssl rand -hex 32
+HERMES_DASHBOARD_SECRET=
 
 # Model provider for the agent.
 OPENROUTER_API_KEY=