Reapply "hermes(agent): also tolerate titan-22's media-primary taint (flip applied pre-classification)"

This reverts commit 1c495a6e2c0a525b9e16608b16bc09c645e3c337.

services/hermes/agent-deployment.yaml

@@ -156,6 +156,14 @@ spec:
           operator: Equal
           value: "true"
           effect: NoSchedule
+        # titan-22 still carries the soft media-primary taint until the accelerator
+        # classification replaces it; tolerate it so the strong titan-22 preference
+        # is not penalised while both taints coexist. Harmless once media-primary
+        # is gone.
+        - key: atlas.bstein.dev/media-primary
+          operator: Equal
+          value: "true"
+          effect: PreferNoSchedule
       initContainers:
         - name: init-config
           image: busybox:1.37