feat(ariadne): link pull requests to the Hermes run that wrote them

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

services/maintenance/apps/ariadne-deployment.yaml

@@ -551,6 +551,11 @@ spec:
             # enters on a build failure; static analysis never fails anything, so
             # its findings would otherwise sit unread forever. From evidence
             # collection onward the path is identical, gates included.
+            # Printed in every pull request Hermes proposes, so a reviewer can
+            # open the run that wrote it rather than taking "Proposed by
+            # Hermes" on trust.
+            - name: ARIADNE_HERMES_UI_URL
+              value: https://agent.bstein.dev
             - name: ARIADNE_HERMES_SONAR_ENABLED
               value: "true"
             - name: ARIADNE_HERMES_SONAR_URL