feat(cli): make hermes portal the human-readable Portal onboarding alias

`hermes portal` (no subcommand) now runs the one-shot Nous Portal onboarding
— OAuth login, switch provider to Nous, offer Tool Gateway — identical to
`hermes setup --portal` and the human-readable alias for
`hermes auth add nous --type oauth` (which still works).

The prior status default moves to `hermes portal info`; `status` is kept as a
hidden back-compat alias. `open`/`tools` subcommands are unchanged.

User-facing hints and docs (status.py, conversation_loop 401 guidance,
SystemPage, README, website docs + zh-Hans) now point at `hermes portal` /
`hermes portal info`. `--manual-paste` references keep the explicit auth
command since `hermes portal` does not expose that flag.

tests/agent/test_nous_oauth_401_guidance.py

@@ -48,8 +48,8 @@ def test_nous_401_guidance_strings_present():
     # (Nous Portal has no API key path — auth_type=oauth_device_code only).
     assert "Nous Portal OAuth token was rejected" in source
 
-    # Must give the exact re-auth command, not a generic "hermes setup".
-    assert "hermes auth add nous --type oauth" in source
+    # Must give a concrete re-auth command, not a generic "hermes setup".
+    assert "hermes portal" in source
 
     # Must point at the portal so users can check account/credit status.
     assert "portal.nousresearch.com" in source