fix(secrets): régénérer discord-hermes-bridge.yml (fichier illisible, MAC cassé)

sops-install-secrets échouait sur ce fichier ('Could not decrypt with
AES_GCM: cipher: message authentication failed'), ce qui bloquait TOUT
nixos-rebuild switch sur tower (pas seulement les services concernés).
Recréé avec une nouvelle valeur aléatoire pour les deux clés partagées
(hermes_discord_bridge_env, discord_bot_hermes_bridge_env) : secret
purement interne (loopback 127.0.0.1, jamais exposé), la rotation ne
casse rien côté consommateurs (discord-bot, hermes-discord-bridge, API
server par défaut) puisqu'ils relisent tous la même valeur au prochain
switch.

secrets/discord-hermes-bridge.yml

@@ -1,17 +1,17 @@
-hermes_discord_bridge_env: ENC[AES256_GCM,data:N14TYsne5p5a7PJvMZzJELORa7xV5Njy2ThiYN4fe0xP+Lt+f5XYcY1dkVi6Azp5VD2ILz+PT9Bg3deitSGsO9sduO6FGD9SFveUZZ7MOA==,iv:VYDRuQKbZFp4vgCG8ZKTaBQNuIdlF6KNLsNfoZi5xOY=,tag:x/sxdzlDghT9Hd8IaVWBHw==,type:str]
-discord_bot_hermes_bridge_env: ENC[AES256_GCM,data:aG1k7e5o8AEGugKnuozvyy/pNzv8j+WJoVNmqnG3lDRBqhnzsNQoRr8BN8CimoRDncKHfRHMc/UalFbw+87RODw+MXfyo6YhvouQqh6xrnpN5/xfbpo=,iv:ISVsE+hvJBYdkGqjTqXlDzghRPzMZqq4F70hVxGd1EU=,tag:0Agx+x9/dPsyN0gY+VUiNw==,type:str]
+hermes_discord_bridge_env: ENC[AES256_GCM,data:tIZaff1RGXN9o/Q9BhEBsFZzQdQSphxo7nB44ZBaanl5pDbWg78C9sDgZ6cJJN8D/pT2Qv9hZNqKIkfihrHn/g==,iv:1hIuEt2jPhz6EHK4INxcQpd6NZNw/C9Wbe4yZq3p5pw=,tag:XL3adu1V93tMGHgWIJY+Pg==,type:str]
+discord_bot_hermes_bridge_env: ENC[AES256_GCM,data:orypi6gTz2x8YTuL7xln7cXdF/2mtN36V0vu+roym3TvSbjUXKI1RdZ2nHccqaOqD6+59n8mzfqAQP+I+vyiZw==,iv:RXcNrErJqCo1WCkAnKy7/sTMwpoiQ9Ke4MjEzL67hWI=,tag:C2zJ8/e6Cn9GA0uYqwxEMA==,type:str]
 sops:
     age:
         - enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRL2lLM3pKanU3cm5HRFI5
-            SmFHKzdMbXNtNmE1cXdTeEJYaGZ3b2RjbWlNCjBaZ1k4enVMM1RiMUdDU1hTdzBO
-            RGw1ay93R0JseEhPODVkNTc2bzFkMHMKLS0tIGZUVElIRk81enIyVTFJSlB0UE1J
-            ejBIcnd1ZW1Fb2hKcDdQellxcm5rM0EKFiwGlSEkY6zmb97CdZdtvuCXrbZaIrFB
-            emRzpaYoiPFFZor3WSrVtsXSaL1ujKddtUAEULKem1V4OFBsKL72HQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBidTdTRUZsQm5xdUdYa3ZW
+            elhRRGJBTlNxOUQwZFdGWHBjQUtHbEdnRkZZCnd1Q2JkZ3lVSENPblo0NUZVaWRs
+            aXV0dXAwYjlhWVFxTDdZeVo5ckppOVUKLS0tIDczbnhDcEV5SGxoVFIwZEVsWnhM
+            VnJMWkplR2NFVXFUQUg1eW1LamR5MUEKhUEfixLHwMOyqFixyGFW02dWWiS6rGxB
+            EZUaTQ4XEHiydFQs2YRRnYJ/XK0uIe0fGOoiKxHduhUqzZ5P2aAqzQ==
             -----END AGE ENCRYPTED FILE-----
           recipient: age1usm3v0ugducrzcwud60dda7xfnj49fdhecj7kcsfm7dzwzrzeyqq2jc2hm
-    lastmodified: "2026-09-27T20:35:36Z"
-    mac: ENC[AES256_GCM,data:tU15GvpxbBefkdaBFRPel7yRreS62E10FltgvwT66oCBuE3I9RR9fbAdF4Xf0dMfG6ANRBVw0QGqlihjfBI84Ghaf57YKNhDuTvYcdP6fI3uQ0cZCEscY7H52o6VbOekawkWRP33Xnq4x3L+4fI0GkWmzK60Xm5zjPuNGcAsaF8=,iv:9nZfRiUj2SZ0f9Tw9+SFAOmJt9KzX92VZ2hrDDsopcQ=,tag:Dmk4zq0E3AvQ3LDbs2831Q==,type:str]
+    lastmodified: "2026-09-29T23:46:27Z"
+    mac: ENC[AES256_GCM,data:eLZD5s1B0ayv5DlWtAl1zLdtFGqogke/AagCCmCgf3FbHZmykzH6DINLaXnVJJdiYV/4RN89IiCj74h5KIhGtGj/FH5x4ZcLTPgWDG5+ho1FRwDoFjUK4z0PmYMNrAI6csqibBAL2tk1L3fL4zXuCoVL1luY+wwXZl9UL2XOkZk=,iv:UCEdJ85d7uUVK/yovD8NJ769Inyl8UBoJJKPtbkrXhg=,tag:TSwl6NtwM5+wDzs/nKpceA==,type:str]
     unencrypted_suffix: _unencrypted
     version: 3.13.3