feat: add Hermes-native LanceDB memory provider

[MarsDoge]

Summary

Adds a Hermes-native lancedb_pro memory provider under integrations/hermes/lancedb_pro/, plus a safe OpenClaw LanceDB importer for migrating legacy OpenClaw rows into a separate Hermes-schema database.

What changed

• Adds/updates the Hermes provider implementation and metadata for lancedb_pro.
• Keeps provider runtime Hermes-schema only, regardless of table name.
• Supports HERMES_MEMORY_LANCEDB_TABLE override; default remains hermes_memories.
• Stores JSON fallback data per table (<safe-table-name>.jsonl) to match table override behavior.
• Adds an OpenClaw migration importer that converts legacy text/timestamp/metadata rows into Hermes content/created_at/metadata_json rows.
• Adds preflight safety checks before migration writes: missing/non-directory source is rejected before lancedb.connect(), source table existence is verified before target creation/connect, and target paths equal to or inside the source are refused.
• Preserves original OpenClaw values in metadata_json as original_* fields.
• Documents migration workflow, table override behavior, and local smoke-test commands.
• Adds regression tests for provider table override, Hermes schema output, JSON fallback file naming, migration conversion, timestamp conversion, metadata parsing, and migration preflight safety.

Test plan

• ./.migration-venv/bin/python -m py_compile integrations/hermes/lancedb_pro/provider.py integrations/hermes/lancedb_pro/scripts/import_openclaw_lancedb.py test/hermes_lancedb_pro_provider_test.py test/hermes_lancedb_pro_openclaw_migration_test.py
• ./.migration-venv/bin/python -m pytest test/hermes_lancedb_pro_provider_test.py test/hermes_lancedb_pro_openclaw_migration_test.py -q
  • Result: 12 passed, 1 skipped.
• git diff --check
  • Result: passed.
• npm test
  • Not run in this local checkout because node_modules is not present.

Safety notes

• No Hermes core files are modified.
• No live OpenClaw DB writes are performed by the provider or tests.
• The importer reads an OpenClaw source only after explicit CLI invocation and writes only to a separate target path.
• The importer refuses source/target path overlap and verifies the source path/table before any target connect/create.
• No API keys or local private DB paths are included in docs or this PR body.
• sync_turn/auto-capture remains disabled by default.
• lancedb_pro_forget deletes only one exact memory id.

Follow-ups

• Add CI coverage for the Python provider tests if upstream wants Python tests in this Node-centric repository.
• Consider richer category/scope ranking controls in a separate change.