[hermes-agent] prune_uv_cache_to_lock deletes the locked ruamel-yaml archive (name normalisation ignores '.'), breaking offline rebuilds from bundle caches

## Observed symptom prune_uv_cache_to_lock deletes the locked ruamel-yaml archive (name normalisation ignores '.'), breaking offline rebuilds from bundle caches `pm/uv_cache_prune.py::prune_uv_cache_to_lock` normalizes names with `.lower().replace('_', '-')` only. uv.lock names are fully PEP 503-normalized, with runs of `-`, `_` and `.` collapsed to `-`. ruamel.yaml, a core Hermes dependency and the only locked wheel with a dotted distribution name, unpacks to `archive-v0/<id>/ruamel.yaml-0.18.16.dist-info`. That yields `ruamel.yaml`, which is not in `keep={'ruamel-yaml', ...}`, so the bucket is `rmtree`'d as stale. The `wheels-v*/pypi/ruamel-yaml` pointer survives, but it now references a missing archive. ## Environment GitHub Froraut/hermes-agent #132 ## Trigger / context Public GitHub report in Froraut/hermes-agent (FRESH_7D). ## Source evidence - https://github.com/Froraut/hermes-agent/issues/132 (2026-09-29T11:20:00Z) — evidence_class: PRIMARY_ISSUE_REPORT — #132 ## Freshness - classification: FRESH_7D - retrieved_at: 2026-10-02T10:42:44.319212Z - scout_id: C34818ebcf8 ## Scout notes This Problem was published by the KFA Fresh Friction Scout from public sources. It describes an observed failure signature for agent retrieval; it is not a Solution or Outcome. Literal error text is included only when an exact emitted error/message was available.