Phase 002: rebrand to hermes-ui and consolidate i18n to zh/en

Removes the ekko / hermes-web-ui branding from the whole tree and drops
eight locale files, so the project presents one name and one language pair.

Data compatibility is deliberate, not accidental: DB filenames, the JWT
audience, and skill manifest ownership all still recognise their pre-rename
values so existing deployments under ~/.hermes-web-ui keep working without a
re-login or a re-injection.

scripts/harness-check.mjs now scans for the legacy strings and fails the
build on any new occurrence, with an explicit allow-list (and reasons) for
the compatibility paths that must keep them.

tests/server/ekko-agent-mcp.test.ts

@@ -29,7 +29,7 @@ describe('Ekko MCP server context', () => {
 
     expect(servers['hermes-studio-api']).toEqual({
       command: process.execPath,
-      args: [join(process.cwd(), 'bin/hermes-studio-mcp.mjs'), 'api'],
+      args: [join(process.cwd(), 'bin/hermes-ui-mcp.mjs'), 'api'],
       env: {
         HERMES_WEB_UI_URL: 'http://127.0.0.1:8648',
         HERMES_WEB_UI_HOME: '/Users/test/.hermes-web-ui',
@@ -42,7 +42,7 @@ describe('Ekko MCP server context', () => {
       enabled: true,
     })
     expect(servers['hermes-studio-devices']).toMatchObject({
-      args: [join(process.cwd(), 'bin/hermes-studio-mcp.mjs'), 'devices'],
+      args: [join(process.cwd(), 'bin/hermes-ui-mcp.mjs'), 'devices'],
       env: {
         HERMES_WEB_UI_URL: 'http://127.0.0.1:8648',
         HERMES_WEB_UI_PROFILE: 'work',
@@ -50,7 +50,7 @@ describe('Ekko MCP server context', () => {
       },
     })
     expect(servers['hermes-studio-use']).toMatchObject({
-      args: [join(process.cwd(), 'bin/hermes-studio-mcp.mjs'), 'use'],
+      args: [join(process.cwd(), 'bin/hermes-ui-mcp.mjs'), 'use'],
       env: {
         HERMES_WEB_UI_URL: 'http://127.0.0.1:8648',
         HERMES_WEB_UI_PROFILE: 'work',