feat(postfix): relay SMTP Gmail + suppression règles Conan nftables

- postfix_relay: switch Brevo → Gmail SMTP (smtp.gmail.com:587, App Password)
- smtp_generic_maps: réécriture expéditeur root@lab.local → aliyesilkaya93@gmail.com
- nftables: suppression DNAT/NAT Conan Exiles (ports 7777/7778/27015)
- gateway handler: reloaded → restarted (flush complet des règles nft)
- hermes_agent: pip → uv pour installation qdrant-client (venv sans pip binaire)
- CLAUDE.md: corrections funk-cluster, hermes-switch, RAID5, postfix
- docs: admin/infra/email.md — procédure complète relay Gmail

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

ansible/roles/hermes_agent/tasks/main.yml

@@ -76,14 +76,17 @@
 
 # --- Packages Python pour les skills ---
 
-- name: Install Python packages for Hermes skills
-  ansible.builtin.pip:
-    name: "qdrant-client>=1.12.0"
-    executable: "{{ hermes_home }}/.hermes/hermes-agent/venv/bin/pip"
-    state: present
+- name: Install Python packages for Hermes skills (via uv)
+  ansible.builtin.command:
+    cmd: >
+      {{ hermes_home }}/.local/bin/uv pip install qdrant-client>=1.12.0
+      --python {{ hermes_home }}/.hermes/hermes-agent/venv/bin/python
+  environment:
+    UV_CACHE_DIR: /tmp/uv-cache
   become: true
-  become_user: "{{ hermes_user }}"
+  become_user: root
   when: hermes_binary.stat.exists
+  changed_when: false
 
 # --- Configuration ---