Integrate the Portable Hermes fast path with current lifecycle authority (performance PR pending)

Parent epic: #11573

## Outcome

Integrate the Portable Hermes fast path with the current lifecycle authority architecture and reuse already-proved authority within one bounded startup operation, including inference recovery and the immediately following authenticated probe.

This is the consolidated performance delivery issue for #11570, #11571, and #11572. Their requirements and implementation references are retained below. Closing those issues records consolidation, not completed implementation, validation, or delivery to `main`.

## Work and acceptance

### Integrate durable Hermes authority — original #11574 scope

- [ ] Integrate the Portable Hermes fast-path behavior with the lifecycle authority architecture delivered by #11490.
- [ ] Preserve receipt, socket, container, policy, authenticated health, and rollback checks.
- [ ] Keep the optimization behind the explicit Portable experiment gate.
- [ ] Fall back to full verification on drift, timeout, missing evidence, or ambiguity.

Candidate: [`ef428a827`](https://github.com/NVIDIA/NemoClaw/commit/ef428a827d2019f1b064000cc474b3d284252efd).
Source implementation history remains in closed issue #11558; this issue owns current-main integration and upstream delivery.

### Reuse proved inference authority — consolidated from #11570

- [ ] Reuse already-proved Portable inference authority within one bounded startup operation instead of repeating the full recovery proof.
- [ ] Keep the optimization behind the explicit Portable experiment gate.
- [ ] Preserve route and receipt validation.
- [ ] Fall back to full recovery on drift, missing evidence, timeout, or ambiguity.

Candidate: [`039d43193`](https://github.com/NVIDIA/NemoClaw/commit/039d431938e446326adf0d49990ed1fc9f8956f2).

### Retain the lifecycle gate — consolidated from #11571

- [ ] Retain the qualified Portable lifecycle gate across one bounded startup flow instead of reacquiring equivalent authority.
- [ ] Retain the gate only within the current bounded operation.
- [ ] Keep ordinary and non-Portable lifecycle paths unchanged.
- [ ] Reacquire or fail closed when the retained proof is absent or no longer current.

Candidate: [`cb9bc4fae`](https://github.com/NVIDIA/NemoClaw/commit/cb9bc4faefc922ceaecd99c06fb56bce2fe7db59).

### Reuse startup evidence in the following probe — consolidated from #11572

- [ ] Reuse startup recovery evidence in the immediately following authenticated probe instead of repeating the complete proof chain.
- [ ] Reuse only exact, current evidence produced by the same bounded startup flow.
- [ ] Preserve authenticated health and inference-route validation.
- [ ] Fall back to the full probe when evidence is missing, stale, or ambiguous.

Implementation: [`69f4f815b`](https://github.com/NVIDIA/NemoClaw/commit/69f4f815b2bff224cd590477f58fa10dc4b21e59).
Main-aligned tests: [`da7c14591`](https://github.com/NVIDIA/NemoClaw/commit/da7c14591ff9a384abdaf110aa519f42122606bf).

## Delivery and validation

No performance PR is linked yet. The candidate commits above are implementation references, not proof that the consolidated requirements pass on current `main`.

- [ ] Open and link a focused performance PR to `main` containing all four work areas above.
- [ ] Pass full CI and review for the final candidate, including the authority-preservation and fallback requirements above.
- [ ] Pass exact-commit Portable lifecycle and timing validation for each work area.
- [ ] Link the separate acceptance task #11559 for real Play click-to-first-prompt, lifecycle cycles, and useful first-response evidence.
- [ ] Record the merged `main` commit.

The separate task #11559 remains the owner of end-to-end acceptance and the 20-second target disposition. This consolidation does not turn projections or source-branch timings into accepted performance evidence.