mios-daemon: point KANBAN_DB at the real hermes data path

The default was /var/lib/mios/hermes/kanban.db -- but the hermes CLI
writes to its HERMES_HOME (.hermes subdir) per its own config:

  $ hermes config show
  Config: /var/lib/mios/hermes/.hermes/config.yaml

Result: every kanban task created via  landed
in /var/lib/mios/hermes/.hermes/kanban.db, the daemon never saw any
of them, and the SurrealDB kanban_shadow table stayed empty. The
parent path is from a pre-.hermes-subdir layout that is no longer
written by current Hermes.

E2E verified after fix: hermes kanban create -> SQLite
(.hermes/kanban.db) -> mios-daemon._collect_kanban_state ->
SurrealDB kanban_shadow row (live with t_d1904abb during
verification).

Operator can override via MIOS_HERMES_KANBAN_DB env if a different
deployment lays out hermes home elsewhere.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: 2 people

usr/libexec/mios/mios-daemon

@@ -766,7 +766,13 @@ def launch_verifier_loop() -> None:
 TASK_COLLECT_TICK_S = float(os.environ.get(
     "MIOS_DAEMON_TASK_COLLECT_TICK_S", "300"))   # 5 min
 KANBAN_DB = Path(os.environ.get(
-    "MIOS_HERMES_KANBAN_DB", "/var/lib/mios/hermes/kanban.db"))
+    # The Hermes CLI writes kanban.db under HERMES_HOME (operator-
+    # confirmed 2026-05-18: hermes config show -> Config:
+    # /var/lib/mios/hermes/.hermes/config.yaml). The stale path
+    # /var/lib/mios/hermes/kanban.db is from a pre-.hermes-subdir
+    # layout and is no longer written -- but kept readable to
+    # support legacy deployments.
+    "MIOS_HERMES_KANBAN_DB", "/var/lib/mios/hermes/.hermes/kanban.db"))
 HERMES_SESSIONS_DIR_DAEMON = Path(os.environ.get(
     "MIOS_HERMES_SESSIONS_DIR", "/var/lib/mios/hermes/sessions"))
 SCRATCH_DIRS = [