Summary

This PR adds support for Kimi K2 models and improves authentication with Kimi CLI OAuth.

Changes

1. Fix Tool Call Parsing (agent/response_adapters.py)

Models like Kimi K2 output tool calls embedded in content:

<tool_call>{"name": "search_files", "arguments": {...}}</tool_call>

Previously these were displayed raw to users instead of being executed. Now they're properly parsed and executed.

Changes:

• Add agent/response_adapters.py with adapt_hermes_tool_call_response() function
• Reuses existing _parse_hermes_json_tool_calls() logic
• Apply adapter in main agent loop when <tool_call> detected in content

2. Add Kimi CLI OAuth Support (hermes_cli/auth.py, agent/auxiliary_client.py)

Users who have authenticated with the official Kimi CLI can now use those same credentials without separate API keys.

Changes:

• Add _read_kimi_cli_oauth_credentials() to read ~/.kimi/credentials/kimi-code.json
• Add _get_kimi_cli_headers() to generate proper headers for OAuth requests
• Add _get_kimi_cli_device_id() helper
• Update _resolve_api_key_provider_secret() to check for Kimi CLI OAuth first
• Update resolve_api_key_provider_credentials() to return default_headers
• Update AIAgent to use OAuth headers when available

Testing

• Tested with kimi-k2.5 model
• Tool calls are now correctly extracted and executed
• OAuth authentication works with existing Kimi CLI credentials

Backward Compatibility

• Non-breaking: OAuth is optional
• Existing API key auth continues to work
• Falls back to simple User-Agent header if OAuth not available