- cli.ts: key resolution now falls back to ~/.hermes/keys/pr-agent-key.pem
when /opt/pr-agent-server/private-key.pem is EACCES/ENOENT (CLI as
non-root user works out of the box)
- cli.ts+index.ts: export logReviewEvent; CLI now records an analytics
event (describe/improve/review) in the legacy pr-agent.*.log format,
best-effort (never fails the CLI on a log write), honoring
PR_AGENT_ANALYTICS_DIR
- Verified: 16/16 tests, tsc clean, describe publishes, review publishes
(comment 5757282509), webhook 403/ping/ignored paths correct