fix: stay root as upstream

Dockerfile

@@ -3,6 +3,7 @@
 #   gcc, ffmpeg, node 22, npm, procps, xz-utils, s6-overlay.
 
 ARG HERMES_AGENT_VERSION=v2026.6.5
+# hadolint ignore=DL3002
 FROM nousresearch/hermes-agent:${HERMES_AGENT_VERSION}
 
 # Install system packages and HashiCorp repo