Fixes #18302.

Summary

• prefer explicit model.base_url for ZAI after GLM_BASE_URL and before endpoint probing/defaults
• make ZAI provider status report the configured base URL
• make auxiliary credential-pool resolution honor the configured ZAI base URL so stale pool entries do not send side tasks back to /api/paas/v4
• add regression coverage for resolver precedence and auxiliary stale-pool override

Verification

• python -m py_compile hermes_cli/auth.py agent/auxiliary_client.py tests/hermes_cli/test_api_key_providers.py tests/agent/test_auxiliary_client.py
• PYTHONPATH=/Users/zhangrong/Documents/home/.pytest-shim:/Users/zhangrong/Documents/home/hermes-agent python -m pytest -q tests/hermes_cli/test_api_key_providers.py::TestZaiEndpointAutoDetect::test_config_base_url_skips_probe tests/agent/test_auxiliary_client.py::test_zai_pool_base_url_honors_config_override
  • Result: 2 passed, 8 warnings

Note: local Conda Python segfaults when importing native readline, so the targeted pytest run used a temporary sitecustomize.py shim that preloads a no-op readline module.