fix(hamc): hermyhq port 4023→4024, add hermyhq-render worker unit

- hermyhq.service: PORT 4024 (4023 occupied by pr-agent-bun)
- Caddyfile.prod: hamc.* proxy → 4024
- hermyhq-render.service: new systemd unit for shorts render worker
  (Remotion + edge-tts, runs /opt/hermyhq-renderer)

infra/caddy/Caddyfile.prod

@@ -177,7 +177,7 @@ mcp.asepharyana.my.id {
 }
 hamc.asepharyana.my.id {
 	import proxy 4024
-}
+}
 
 dev.asepharyana.my.id {
 	import proxy 3000

infra/systemd/hermyhq-render.service

@@ -0,0 +1,22 @@
+[Unit]
+Description=Hermy HQ — Shorts render worker (Remotion + TTS)
+After=network.target postgresql.service hermyhq.service
+Wants=hermyhq.service
+
+[Service]
+Type=simple
+User=code
+Group=code
+WorkingDirectory=/opt/hermyhq-renderer
+EnvironmentFile=/etc/hermyhq/hermyhq.env
+Environment=RENDER_DIR=/data/renders
+Environment=RENDER_SCRATCH=/tmp/hamc-render
+Environment=REMOTION_ROOT=/opt/hermyhq-renderer/src/remotion
+Environment=CHROME_BIN=/usr/bin/google-chrome-stable
+Environment=EDGE_TTS_BIN=/home/code/.hermes/hermes-agent/venv/bin/edge-tts
+ExecStart=/usr/bin/node /opt/hermyhq-renderer/scripts/render-worker.mjs
+Restart=on-failure
+RestartSec=10
+
+[Install]
+WantedBy=multi-user.target

infra/systemd/hermyhq.service

@@ -8,7 +8,7 @@ User=code
 Group=code
 Environment=NODE_ENV=production
 Environment=HOSTNAME=127.0.0.1
-Environment=PORT=4023
+Environment=PORT=4024
 EnvironmentFile=/etc/hermyhq/hermyhq.env
 ExecStart=/nix/var/nix/profiles/hermyhq/bin/hermyhq
 Restart=on-failure