feat: provision private Hermes assistants for authenticated Hope accounts

control/__main__.py

@@ -0,0 +1,12 @@
+"""Run `python -m control`; never exposes the control plane on LAN by default."""
+import os
+import uvicorn
+
+from .app import create_app
+
+if __name__ == '__main__':
+    # Access logs include path identifiers; disable to avoid accidental secret
+    # disclosure if a malformed client includes credentials in a URL.
+    uvicorn.run(create_app(), host=os.getenv('CONTROL_HOST', '127.0.0.1'),
+                port=int(os.getenv('CONTROL_PORT', '8092')), access_log=False,
+                proxy_headers=False)