Create employee
1. Slack OAuth to token file
Tenor handles OAuth and renders Hermes-compatible slack_tokens.json for the VM.
2. Native Hermes gateway
Hermes owns Slack and email message handling inside a dedicated runtime.
3. Tenor identity graph
D1 stores people and surfaces so the VM gets a compact who-is-who file.
4. Back up /opt/data
Snapshots must include sessions, Honcho config, skills, workspace, and local state.