feat(hermes-code): demo repo Jenkins job + Ariadne code-path configuration

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

services/jenkins/configmap-jcasc.yaml

@@ -447,6 +447,24 @@ data:
               }
             }
           }
+          pipelineJob('hermes-code-demo') {
+            disabled(false)
+            description('Hermes code-repair demo: pytest gate over a small pricing helper. A seeded one-line defect fails the gate; Hermes proposes a minimal patch and Ariadne opens a pull request for human review.')
+            definition {
+              cpsScm {
+                scm {
+                  git {
+                    remote {
+                      url('https://scm.bstein.dev/bstein/hermes-code-demo.git')
+                      credentials('gitea-pat')
+                    }
+                    branches('*/master')
+                  }
+                }
+                scriptPath('Jenkinsfile')
+              }
+            }
+          }
           pipelineJob('hermes-triage-demo') {
             disabled(false)
             description('Hermes automated-triage demo: runs a deterministic fixture check as a Kubernetes Job in the hermes-triage-demo namespace. Build with SEED_FAILURE=true to arm the demo failure; the automated repair loop rebuilds with SEED_FAILURE=false.')

services/maintenance/apps/ariadne-deployment.yaml

@@ -461,7 +461,7 @@ spec:
             - name: ARIADNE_HERMES_AUTOTRIAGE_ENABLED
               value: "true"
             - name: ARIADNE_HERMES_AUTOTRIAGE_JOB_ALLOWLIST
-              value: hermes-triage-demo
+              value: hermes-triage-demo,hermes-code-demo
             - name: ARIADNE_HERMES_AUTOREMEDIATION_ENABLED
               value: "true"
             - name: ARIADNE_HERMES_ALLOWED_ACTIONS
@@ -480,6 +480,34 @@ spec:
                   name: hermes-api-server-key
                   key: api-key
                   optional: true
+            - name: ARIADNE_HERMES_CODE_ENABLED
+              value: "true"
+            - name: ARIADNE_HERMES_CODE_JOB
+              value: hermes-code-demo
+            - name: ARIADNE_HERMES_CODE_OWNER
+              value: bstein
+            - name: ARIADNE_HERMES_CODE_REPO
+              value: hermes-code-demo
+            - name: ARIADNE_HERMES_CODE_BASE_BRANCH
+              value: master
+            - name: ARIADNE_HERMES_CODE_CANDIDATE_PATH
+              value: src/discount.py
+            - name: ARIADNE_HERMES_CODE_ALLOWED_PREFIXES
+              value: src/
+            - name: ARIADNE_HERMES_CODE_ALLOWED_SUFFIXES
+              value: .py
+            - name: ARIADNE_HERMES_CODE_MAX_PATCH_BYTES
+              value: "4000"
+            - name: ARIADNE_HERMES_CODE_MAX_CHANGED_LINES
+              value: "20"
+            - name: ARIADNE_HERMES_GITEA_BASE_URL
+              value: https://scm.bstein.dev
+            - name: ARIADNE_HERMES_GITEA_TOKEN
+              valueFrom:
+                secretKeyRef:
+                  name: hermes-gitea-token
+                  key: token
+                  optional: true
             - name: ARIADNE_TESTING_TRIAGE_MODEL_URL
               value: http://hermes-model-gate.hermes.svc.cluster.local:11434
             - name: ARIADNE_TESTING_TRIAGE_MODEL