M0: toolchain, monorepo scaffold, gateway plugin skeleton, CMP app

- gateway-plugin/: android platform plugin (plugin.yaml + adapter.py
  register(ctx) + no-op AndroidAdapter) + stub modules for M1-M5
- app/: Compose Multiplatform project (shared KMP + androidApp +
  desktopApp) with Gradle wrapper; builds :androidApp:assembleDebug
  and :desktopApp:compileKotlin
- scripts/guard_hermes_agent.sh + pre-commit hook: fail if hermes-agent/
  is staged (read-only reference, never committed)
- .gitignore excludes hermes-agent/; docs/ reference library

.gitignore

@@ -0,0 +1,34 @@
+# ── HARD RULE: hermes-agent is a read-only research reference ─────────────
+# It must NEVER be committed, pushed, or shipped.
+/hermes-agent/
+
+# ── Python (gateway-plugin) ───────────────────────────────────────────────
+__pycache__/
+*.py[cod]
+*.egg-info/
+.venv/
+venv/
+.pytest_cache/
+.ruff_cache/
+
+# ── Kotlin / Gradle (app) ─────────────────────────────────────────────────
+.gradle/
+build/
+local.properties
+*.iml
+.idea/
+captures/
+.cxx/
+
+# ── Android / secrets ─────────────────────────────────────────────────────
+app/androidApp/src/main/res/values/secrets.xml
+google-services.json
+*.jks
+keystore.jks
+*.keystore
+
+# ── OS / misc ─────────────────────────────────────────────────────────────
+.DS_Store
+Thumbs.db
+*.log
+*.tmp