Change hermes-agent model

modules/hermes-agent.nix

@@ -3,6 +3,12 @@
 {
   sops.secrets."hermes-env" = {};
 
+  sops.secrets."hermes/auth.json" = {
+    owner = "hermes";
+    group = "hermes";
+    mode = "0400";
+  };
+
   services.hermes-agent = {
     enable = true;
 
@@ -12,7 +18,13 @@
       hostUsers = [ "tobi" ];
     };
 
-    settings.model.default = "qwen/qwen3.7-max";
+    settings.model = {
+      provider = "openai-codex";
+      default = "gpt-5.5";
+    };
+
+    authFile = config.sops.secrets."hermes/auth.json".path;
+    authFileForceOverwrite = true;
 
     environmentFiles = [ config.sops.secrets."hermes-env".path ];