feat(dashboard): SKILL.md editor on Skills page + attach-skill selector in cron modals

[teknium1]

Summary

The dashboard can now author custom skills (a SKILL.md editor on the Skills page) and attach skills to cron jobs (a multi-select in the cron create/edit modals) — closing the "Cron = when, Skill = how" loop for headless/VPS users whose only GUI is the dashboard (community request from @sora_biz: the only way to add a custom skill or link one to a cron was SSH + nano / hermes cron edit --add-skill).

Changes

• web/src/components/SkillEditorDialog.tsx (new): SKILL.md editor dialog — create mode (name + optional category + frontmatter template) and edit mode (loads the raw SKILL.md, full rewrite). Errors from server-side validation render inline.
• web/src/pages/SkillsPage.tsx: "New skill" button in the skills-list header + a per-row edit pencil; list refreshes after save.
• hermes_cli/web_server.py:
  • GET /api/skills/content, POST /api/skills, PUT /api/skills/content — thin wrappers over the agent's existing skill_manage write path (_create_skill/_edit_skill: name/category/frontmatter/size validation, optional security scan, atomic writes), so dashboard writes behave exactly like agent/CLI writes. Skills prompt-cache snapshot invalidated after a successful write.
  • _profile_scope() now also retargets tools.skill_manager_tool's import-time HERMES_HOME/SKILLS_DIR binding (same seam as skills_tool), so editor reads/writes profile-scope correctly.
  • CronJobCreate gains skills: Optional[List[str]], passed through to create_job (which already supported it); update_job already accepted skills in updates.
• web/src/pages/CronPage.tsx: skills multi-select (native checkboxes) in both the create and edit modals, populated from /api/skills for the job's profile; skills the job already carries but that aren't installed stay visible so saving doesn't silently drop them; attached-skills badge on job cards.
• web/src/lib/api.ts: getSkillContent/createSkill/updateSkillContent methods, SkillContent/SkillWriteResult types, skills on CronJob + create/update payloads.

Validation

Check	Result
tests/hermes_cli/test_web_server_skill_editor.py (17 new tests: content read + profile scoping, create validation/dup/path-escape, edit 404/400, auth-gate 401s, cron skills round-trip)	pass
Sibling suites: test_web_server.py, test_web_server_skills_profiles.py, test_web_server_cron_profiles.py, tests/tools/test_skill_manager_tool.py, tests/cron/	pass
E2E over live uvicorn (real HERMES_HOME, urllib): create → read → edit → on-disk verify, bad frontmatter 400, cron create-with-skills + clear, no-token 401	pass
npx tsc -b --force + npm run build + eslint on touched files (no new errors vs origin/main)	clean

Infographic

[github-actions]

🔎 Lint report: feat/dashboard-skill-editor-cron-skills vs origin/main

ruff

Total: 0 on HEAD, 0 on base (➖ 0)

🆕 New issues: none

✅ Fixed issues: none

Unchanged: 0 pre-existing issues carried over.

ty (type checker)

Total: 10712 on HEAD, 10709 on base (🆕 +3)

🆕 New issues (3):

Rule	Count
unresolved-import	2
invalid-argument-type	1

First entries

tests/hermes_cli/test_web_server_skill_editor.py:14: [unresolved-import] unresolved-import: Cannot resolve imported module `pytest`
tests/hermes_cli/test_web_server_skill_editor.py:58: [unresolved-import] unresolved-import: Cannot resolve imported module `starlette.testclient`
hermes_cli/web_server.py:8794: [invalid-argument-type] invalid-argument-type: Argument to function `_create_skill` is incorrect: Expected `str`, found `(str & ~AlwaysFalsy) | None`

✅ Fixed issues: none

Unchanged: 5603 pre-existing issues carried over.

Diagnostics are surfaced as warnings — this check never fails the build.