- Add hermes-serve (port 9120) for desktop JSON-RPC backend - Add hermes-dashboard (port 9121) for web UI - Both docker exec with -u hermes to avoid root-owned files - Add BW_SERVERURL env var - Expose port 9120 in container extraOptions