fix(nous): use curated model list instead of full API dump for Nous Portal

[teknium1]

Problem

All three Nous Portal model selection paths were calling fetch_nous_models() which hits the live /models endpoint and returns every model available — potentially hundreds. Users selecting Nous Portal via hermes model got an overwhelming dump instead of the curated agentic models we show for OpenRouter.

Fix

Replaced fetch_nous_models() calls with the curated _PROVIDER_MODELS['nous'] list (25 models, same as OpenRouter defaults). Users can still pick unlisted models via "Enter custom model name."

Three paths fixed:

• hermes_cli/main.py: _model_flow_nous() — already-logged-in model picker
• hermes_cli/auth.py: _login_nous() — first-time login model selection
• hermes_cli/setup.py: post-login model selection in setup wizard

Tests

7070 passed, 2 pre-existing failures, 0 regressions.

[github-actions]

⚠️ Supply Chain Risk Detected

This PR contains patterns commonly associated with supply chain attacks. This does not mean the PR is malicious — but these patterns require careful human review before merging.

⚠️ WARNING: Install hook files modified

These files can execute code during package installation or interpreter startup.

Files:

hermes_cli/setup.py

---

Automated scan triggered by supply-chain-audit. If this is a false positive, a maintainer can approve after manual review.