hermes -z can miss MCP tools because oneshot snapshots tools before MCP discovery

In oneshot mode (hermes -z), the agent's tool list is built before MCP discovery registers dynamic MCP tools/aliases, so tools from configured MCP servers are never available even though they pass hermes mcp test.