When a chat provider exposes TTS / image / vision capabilities on the
same API base and credential, the setup wizard wires them as the
default tool backends and the tool dispatchers route through this
module instead of the generic FAL / auxiliary-client paths.

Mirrors the shape of `hermes_cli/nous_subscription.py`: one apply hook
for the wizard, plus runtime helpers consumed by the tool files.
MiniMax is the first registered consumer (international + CN); adding
another provider is one row in `NATIVE_TOOLS_BY_PROVIDER` plus a set
of request helpers.

Source:
- `hermes_cli/provider_native_tools.py` (new): registry,
  `apply_provider_native_tool_defaults` (mirror of
  `apply_nous_provider_defaults`), `generate_image` / `analyze_image`
  runtime dispatchers, `active_provider_api_root` / `native_credential_present`
  / `minimax_endpoint_and_key` helpers, plus the MiniMax request
  bindings inline in the same file — same shape as `nous_subscription.py`.
- `hermes_cli/setup.py` (+26 / −1): call the generic hook beside the
  existing Nous branch; skip the interactive TTS prompt when the
  active provider already owns `tts`.
- `tools/image_generation_tool.py` (+24): early-call the native
  dispatcher, fall through on `None`.  `check_fn` accepts the native
  credential as meeting the requirement.  Zero MiniMax mentions.
- `tools/vision_tools.py` (+28): early-call the native dispatcher
  when the user hasn't pinned `auxiliary.vision.provider`.  Zero
  MiniMax mentions.
- `tools/tts_tool.py` (+13 / −1): existing `_generate_minimax_tts`
  derives its URL + key from `minimax_endpoint_and_key` so CN users
  (`minimax-cn` → `api.minimaxi.com`) and the correct regional key are
  used automatically; falls back to the existing international
  defaults otherwise.

Tests (`tests/hermes_cli/test_provider_native_tools.py`, new): 47
cases — registry, alias normalisation, URL derivation, apply_defaults
idempotency / override preservation, CN parity, describe_changes
phrasing, credential + endpoint helpers.

Design notes:
- URL derivation reuses `model.base_url`, stripping the `/anthropic`
  chat-compat suffix.  CN users who pick `minimax-cn` automatically
  get `api.minimaxi.com` because their `base_url` already points
  there.  No separate `MINIMAX_API_HOST` env var.
- Provider detection uses `hermes_cli.providers.normalize_provider`
  so hand-edited aliases (`minimax-china`, `minimax_cn`) resolve to
  the canonical id.
- Credential selection flips on region: `minimax-cn` prefers
  `MINIMAX_CN_API_KEY`; `minimax` prefers `MINIMAX_API_KEY`.  Either
  falls back to the other on absence.
- Vision uses runtime dispatch (no persisted config value) because
  chat models on `/anthropic/v1/messages` don't accept multimodal
  content; vision is served by `/v1/coding_plan/vlm` (the same
  endpoint MiniMax's official `mmx vision` CLI targets), which takes
  a non-chat request shape.

Zero new pip dependencies (stdlib only).  Zero behaviour change for
users on chat providers not registered in `NATIVE_TOOLS_BY_PROVIDER`.