The Windows branch spawned the updater as `hermes.exe update --gateway`, so the update held the very shim it had to replace and failed with os error 32. Invoke it as `python -m hermes_cli.main update --gateway` under the same interpreter the gateway already runs, which maps no shim. Salvaged from #89970 by @Akloenx123.