HERMES_DATA_DIR_SUFFIX, HERMES_REPO_URL, HERMES_UPDATE_STATUS_FILE and HERMES_UPDATE_UI_ACTIVE are set by Hermes' own bundles, installers and update shim, not by users, but only the suffix was documented and it read as a user knob. Add an "Internal bridge variables" table that says who sets each one and why it cannot live in config, and move the suffix row there.