chore: apply tested follow-up to PR 84 and remove temporary branch

Author: sunnylqm

.github/workflows/hermes-review-followup.yml

@@ -1,23 +1,39 @@
-name: Hermes review follow-up workspace
+name: Apply reviewed Hermes follow-up
 on:
   push:
     branches: [codex/hermes-review-followup-workspace]
+    paths: [.github/workflows/hermes-review-followup.yml]
 permissions:
-  contents: read
+  contents: write
 jobs:
-  snapshot:
+  apply:
     runs-on: blacksmith-4vcpu-ubuntu-2404
     timeout-minutes: 5
     steps:
       - uses: actions/checkout@v7
         with:
-          ref: 67259bfa968867da556c6437ee804e7dc2a86d3a
-          persist-credentials: false
-      - name: Archive the reviewed source
-        run: git archive HEAD | gzip > "$RUNNER_TEMP/hermes-pr84-source.tgz"
-      - uses: actions/upload-artifact@v7
-        with:
-          name: hermes-pr84-source
-          path: ${{ runner.temp }}/hermes-pr84-source.tgz
-          retention-days: 1
-          if-no-files-found: error
+          fetch-depth: 0
+          persist-credentials: true
+      - name: Apply only the locally validated source and tests
+        shell: bash
+        run: |
+          set -euo pipefail
+          base64 -d .hermes-followup.patch.xz.b64 | xz -dc > "$RUNNER_TEMP/hermes-followup.patch"
+          echo "a001fc33081bdc7c49146c4838804ba0b0edd8971d98fd3e2c4de9de31213d60  $RUNNER_TEMP/hermes-followup.patch" | sha256sum --check
+          git fetch origin codex/fix-hermes-base-verification
+          test "$(git rev-parse FETCH_HEAD)" = 67259bfa968867da556c6437ee804e7dc2a86d3a
+          git switch --detach FETCH_HEAD
+          git apply --check "$RUNNER_TEMP/hermes-followup.patch"
+          git apply --index "$RUNNER_TEMP/hermes-followup.patch"
+          git diff --cached --check
+          test "$(git diff --cached --name-only | wc -l)" -eq 6
+          test "$(git write-tree)" = 40e806da93beb1c4847d7212a80ee85285970ded
+          git diff --cached --stat
+          git config user.name 'github-actions[bot]'
+          git config user.email '41898282+github-actions[bot]@users.noreply.github.com'
+          git commit -m 'test(hermes-base): isolate late errors and preserve spacing semantics'
+          git push origin HEAD:refs/heads/codex/fix-hermes-base-verification
+          git rev-parse HEAD HEAD^{tree}
+          if test "$(git ls-remote origin refs/heads/codex/hermes-review-followup-workspace | cut -f1)" = "$GITHUB_SHA"; then
+            git push origin --delete codex/hermes-review-followup-workspace
+          fi