The in-process check only showed the resolver branches. This launches
`hermes serve` with HERMES_DESKTOP scrubbed from its environment — what a
URL-token or cloud backend actually looks like — and asks it over the same
WebSocket the desktop app uses which tools each session's agent resolved.
Fails on the pre-fix tree (desktop gui=[]), passes after (all six).
