flux(hermes): recover blocked router rollout

clusters/atlas/flux-system/applications/hermes/recovery.yaml

@@ -0,0 +1,23 @@
+# clusters/atlas/flux-system/applications/hermes/recovery.yaml
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: hermes-recovery
+  namespace: flux-system
+spec:
+  interval: 1h
+  path: ./services/hermes
+  targetNamespace: hermes
+  prune: false
+  wait: false
+  timeout: 5m
+  sourceRef:
+    kind: GitRepository
+    name: flux-system
+    namespace: flux-system
+  dependsOn:
+    - name: cert-manager
+    - name: core
+    - name: keycloak
+    - name: longhorn
+    - name: vault

clusters/atlas/flux-system/applications/kustomization.yaml

@@ -28,6 +28,7 @@ resources:
   - ai-llm/kustomization.yaml
   - openclaw/kustomization.yaml
   - hermes/kustomization.yaml
+  - hermes/recovery.yaml
   - hermes-chat/kustomization.yaml
   - hermes-triage-demo/kustomization.yaml
   - game-stream/kustomization.yaml