Profiled workers need a shared auth home separate from isolated HERMES_HOME

Profiled Hermes workers using isolated HERMES_HOME directories can end up with split-brain OAuth state for rotating/single-use refresh tokens; the reporter proposes a separate shared HERMES_AUTH_HOME for auth storage.