fix: preserve integer type for Telegram allowed_user_ids

Devin Review caught a red issue: quoting ${TELEGRAM_OWNER_ID} inside a
flow sequence (e.g. ["${TELEGRAM_OWNER_ID}"]) makes the YAML valid but
changes the parsed type from int to str after env-var substitution.
Telegram user IDs are numeric and Hermes compares them with strict
type matching, so a string-typed list would reject all messages.

Switched all 4 templates + 2 reference architectures + the wizard
generator to block-sequence style:

    allowed_user_ids:
      - ${TELEGRAM_OWNER_ID}

Verified with PyYAML that post-substitution type is int across all 4
templates.

Also: localized READMEs (zh + ja) now use 'sudo bash' to match the
main README, since vps-bootstrap.sh requires root.

Co-Authored-By: Rob <onerobby@gmail.com>

Author: devin-ai-integration[bot]

README-ja.md

@@ -8,7 +8,7 @@
 
 ```bash
 # 新しい Debian 12 / Ubuntu 24.04 VPS で実行
-curl -sSL https://raw.githubusercontent.com/OnlyTerp/hermes-optimization-guide/main/scripts/vps-bootstrap.sh | bash
+curl -sSL https://raw.githubusercontent.com/OnlyTerp/hermes-optimization-guide/main/scripts/vps-bootstrap.sh | sudo bash
 ```
 
 もしくは [docs/quickstart.md](./docs/quickstart.md)（5 分で Telegram Bot）を参照。

README-zh.md

@@ -8,7 +8,7 @@
 
 ```bash
 # 新建 Debian 12 / Ubuntu 24.04 VPS 上运行
-curl -sSL https://raw.githubusercontent.com/OnlyTerp/hermes-optimization-guide/main/scripts/vps-bootstrap.sh | bash
+curl -sSL https://raw.githubusercontent.com/OnlyTerp/hermes-optimization-guide/main/scripts/vps-bootstrap.sh | sudo bash
 ```
 
 或阅读 [docs/quickstart.md](./docs/quickstart.md)（5 分钟 Telegram 机器人）。

docs/reference-architectures/homelab.md

@@ -95,7 +95,8 @@ gateways:
     bots:
       admin:
         token: "${TELEGRAM_ADMIN_BOT_TOKEN}"
-        allowed_user_ids: ["${TELEGRAM_OWNER_ID}"]
+        allowed_user_ids:
+          - ${TELEGRAM_OWNER_ID}
 
 memory:
   backend: lightrag

docs/reference-architectures/road-warrior.md

@@ -68,7 +68,8 @@ gateways:
     bots:
       admin:
         token: "${TELEGRAM_ADMIN_BOT_TOKEN}"
-        allowed_user_ids: ["${TELEGRAM_OWNER_ID}"]
+        allowed_user_ids:
+          - ${TELEGRAM_OWNER_ID}
 
 # The money section
 remote_sandbox:

docs/wizard/index.html

@@ -322,7 +322,8 @@ <h1>Hermes Config Wizard</h1>
     lines.push(`    bots:`);
     lines.push(`      admin:`);
     lines.push(`        token: "$\{TELEGRAM_ADMIN_BOT_TOKEN\}"`);
-    lines.push(`        allowed_user_ids: ["$\{TELEGRAM_OWNER_ID\}"]`);
+    lines.push(`        allowed_user_ids:`);
+    lines.push(`          - $\{TELEGRAM_OWNER_ID\}`);
     lines.push(`        trust_label: high`);
   }
   if (gateways.discord) {

templates/config/cost-optimized.yaml

@@ -60,7 +60,8 @@ gateways:
     bots:
       admin:
         token: ${TELEGRAM_ADMIN_BOT_TOKEN}
-        allowed_user_ids: ["${TELEGRAM_OWNER_ID}"]
+        allowed_user_ids:
+          - ${TELEGRAM_OWNER_ID}
 
 memory:
   backend: lightrag

templates/config/production.yaml

@@ -62,7 +62,8 @@ gateways:
     bots:
       admin:
         token: ${TELEGRAM_ADMIN_BOT_TOKEN}
-        allowed_user_ids: ["${TELEGRAM_OWNER_ID}"]
+        allowed_user_ids:
+          - ${TELEGRAM_OWNER_ID}
         trust_label: high
   discord:
     enabled: true

templates/config/security-hardened.yaml

@@ -46,7 +46,8 @@ gateways:
     bots:
       admin:
         token: ${TELEGRAM_ADMIN_BOT_TOKEN}
-        allowed_user_ids: ["${TELEGRAM_OWNER_ID}"]
+        allowed_user_ids:
+          - ${TELEGRAM_OWNER_ID}
         profile: trusted
       public:
         token: ${TELEGRAM_PUBLIC_BOT_TOKEN}

templates/config/telegram-bot.yaml

@@ -30,7 +30,8 @@ gateways:
       # Primary / admin bot — this is YOU
       admin:
         token: ${TELEGRAM_ADMIN_BOT_TOKEN}
-        allowed_user_ids: ["${TELEGRAM_OWNER_ID}"]
+        allowed_user_ids:
+          - ${TELEGRAM_OWNER_ID}
         trust_label: high
         default_skill: default
       # Public bot — strangers talk to this one (optional, comment out to skip)