689ec30f34
The lock pins both as required packages, but the image took them from apt, so `hermes pm doctor` reported them missing and `hermes doctor` escalated to "install out of sync ... rebuild the artifact" on every container. Ensure them through PM like uv/chromium/npm, drop the apt packages, and link ffmpeg, ffprobe (shipped beside it) and rg into /usr/local/bin for `docker exec`.