launchd ProgramArguments now run through osascript (#71206); the plist test unwraps the exec argv and keeps the PM launcher-shaped assertions. run_tests.sh forwards HERMES_GATEWAY_LOCK_DIR alongside the SSL vars.