HERMES_CRON_SESSION set process-globally: interactive gateway sessions inherit cron approval policy after any cron runs

# Cron scheduler sets `HERMES_CRON_SESSION=1` process-globally — interactive gateway sessions inheri