Keep Clippy warnings non-fatal and retry Hermes downloads

[MyTH-zyxeon]

Summary

• run Clippy without globally promoting every warning to a CI error
• retain Clippy compile/error failures as failing checks
• apply the same policy to core, gateway, operator, openab-agent, and auth-proxy workflows
• retry transient Hermes installer download failures up to five times
• preserve the pinned commit and SHA-256 verification

Validation

• cargo clippy --locked
• parsed the changed workflow YAML files
• git diff --check
• Dockerfile smoke validation delegated to the PR matrix because Docker is unavailable on the MISA L host

Run-Id: run-3fdbfd5f60f279b8fa5c10a60a72980f
Trace-Id: trace-b34dc0e6d315716476d39616c3b75814
Root-Requester: Jun Discord id 473730953735438336
Implementer: MISA L / Linux MISA bot ID 1522164661028519996

[github-actions]

⚠️ This PR is missing a Discord Discussion URL in the body.

All PRs must reference a prior Discord discussion to ensure community alignment before implementation.

Please edit the PR description to include a link like:

Discord Discussion URL: https://discord.com/channels/...

This PR will be automatically closed in 3 days if the link is not added.