fix: skip Hermes config/wrapper integrity checks for tanko (DSH)

check_config_integrity and check_wrapper_integrity still probed tanko (CT 112)
for Hermes-only artifacts (/root/.hermes/config.yaml, the hermes CLI wrapper)
that no longer exist since tanko moved to DSH on 2026-08-27. This caused false
FAILs in the agent health check. Both now skip tanko via runtime=dsh.

scripts/agent-health-check.py

@@ -337,6 +337,10 @@ def check_ct_liveness():
 def check_config_integrity():
     """Verify agent config.yaml parses as valid YAML."""
     for name, agent in AGENTS.items():
+        # Tanko runs on DSH (DeepSeek Harness) since 2026-08-27 — no Hermes config.yaml.
+        if agent.get("runtime") == "dsh":
+            print(f"  ⏭️ {name}: DSH — no Hermes config.yaml since 2026-08-27")
+            continue
         host = agent.get("host")
         user = agent.get("user")
         if not host or not user:
@@ -366,6 +370,10 @@ def check_config_integrity():
 def check_wrapper_integrity():
     """Verify the hermes CLI wrapper exists and can reach hermes-real."""
     for name, agent in AGENTS.items():
+        # Tanko runs on DSH (DeepSeek Harness) since 2026-08-27 — no hermes CLI wrapper.
+        if agent.get("runtime") == "dsh":
+            print(f"  ⏭️ {name}: DSH — no hermes CLI wrapper since 2026-08-27")
+            continue
         host = agent.get("host")
         user = agent.get("user")
         if not host or not user: