Phase 002: rebrand to hermes-ui and consolidate i18n to zh/en

Removes the ekko / hermes-web-ui branding from the whole tree and drops
eight locale files, so the project presents one name and one language pair.

Data compatibility is deliberate, not accidental: DB filenames, the JWT
audience, and skill manifest ownership all still recognise their pre-rename
values so existing deployments under ~/.hermes-web-ui keep working without a
re-login or a re-injection.

scripts/harness-check.mjs now scans for the legacy strings and fails the
build on any new occurrence, with an explicit allow-list (and reasons) for
the compatibility paths that must keep them.

docker-compose.yml

@@ -1,17 +1,17 @@
 services:
-  hermes-webui:
+  hermes-ui:
     build:
       context: .
       dockerfile: Dockerfile
-    image: ${WEBUI_IMAGE:-hermes-web-ui-local:latest}
-    container_name: ${WEBUI_CONTAINER_NAME:-hermes-webui}
+    image: ${WEBUI_IMAGE:-hermes-ui-local:latest}
+    container_name: ${WEBUI_CONTAINER_NAME:-hermes-ui}
     ports:
       - "${PORT:-6060}:${PORT:-6060}"
       - "${PREVIEW_FRONTEND_PORT:-8651}:8651"
       - "${XAI_OAUTH_PORT:-56121}:56121"
     volumes:
       - ${HERMES_DATA_DIR:-./hermes_data}:/home/agent/.hermes
-      - ${HERMES_DATA_DIR:-./hermes_data}/hermes-web-ui:/home/agent/.hermes-web-ui
+      - ${HERMES_DATA_DIR:-./hermes_data}/hermes-ui:/home/agent/.hermes-web-ui
     environment:
       - PORT=${PORT:-6060}
       - HERMES_HOME=/home/agent/.hermes