`[2026-09-23]` hermes-gateway restart exit-1 is a Hermes race, not a crash

hermes-gateway restart exit-1 is a Hermes race, not a crash — the planned-stop watcher consumes the marker before SIGTERM re-runs the handler; drop-in SuccessExitStatus=1 stops the false OnFailure page at zero coverage cost (c2b0a05). svos had its own stop-timeout (an open board SSE tab), fixed by svos-dev with timeout_graceful_shutdown=5.