PM builds the image venv relocatable. Its bin/activate finds itself only under
bash/zsh/ksh; under dash SCRIPT_PATH is empty, realpath '' fails, and it
exports VIRTUAL_ENV=. with ./bin first on PATH. Every root-run s6 script did
`cd /opt/data; . activate; exec s6-setuidgid hermes ...`, so /opt/data/bin --
on the volume, writable by the agent's own uid -- shadowed /command: a planted
bin/s6-setuidgid ran as uid 0 and the gateway stayed root.
The image's ENV PATH already carries /opt/hermes/bin and the venv's bin, and
with-contenv restores it, so the three sites (main-wrapper, dashboard, the
generated per-profile gateway run script) drop the source entirely.
e548e7758c