The inspect-pooling test compared the full constructor kwarg dict, so
any harmless future kwarg (e.g. headers=) would flip it without a
behaviour change. Assert the two properties it actually proves.
PROOF: dropping `timeout=` from the pooled create_ssrf_safe_client call
(tools/skills_hub.py:104) fails with KeyError at the timeout assertion;
changing it to `_DEFAULT_HTTP_TIMEOUT + 1` fails `assert 21 == 20`.
Reverted; tests/hermes_cli/test_skills_hub.py 12 passed.