feat(infra): add hamc.asepharyana.my.id (hermyhq) Caddy routing + systemd unit

- Caddy: hamc.asepharyana.my.id -> 127.0.0.1:4023 (import proxy)
- systemd: hermyhq.service (Next.js 16 standalone, profile /nix/var/nix/profiles/hermyhq, env /etc/hermyhq/hermyhq.env)

infra/caddy/Caddyfile.prod

@@ -175,4 +175,7 @@ mcpedia.asepharyana.my.id {
 mcp.asepharyana.my.id {
 	import proxy 4021
 }
-}
+hamc.asepharyana.my.id {
+	import proxy 4023
+}
+}

infra/systemd/hermyhq.service

@@ -0,0 +1,18 @@
+[Unit]
+Description=Hermy HQ — Hermes mission control dashboard (Next.js 16 standalone)
+After=network.target postgresql.service
+
+[Service]
+Type=simple
+User=code
+Group=code
+Environment=NODE_ENV=production
+Environment=HOSTNAME=127.0.0.1
+Environment=PORT=4023
+EnvironmentFile=/etc/hermyhq/hermyhq.env
+ExecStart=/nix/var/nix/profiles/hermyhq/bin/hermyhq
+Restart=on-failure
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target