feat: auto-register lifecycle-heartbeat cron on startup

- Inject lifecycle-heartbeat cron job into jobs.json on container start
- Idempotent: skips if job already exists
- Merges all heartbeat functions into a single cron task
- Runs every 2h: health check, config integrity, log analysis, insights, cleanup

start.sh

@@ -218,6 +218,94 @@ else
     echo "MemPalace already initialized."
 fi
 
+# ─── Auto-register Lifecycle Cron Job ─────────────────
+# 合并后的单一 cron：lifecycle-heartbeat
+# 包含：健康检查 / 配置完整性 / 日志分析 / 洞察记录 / 清理 / 状态更新
+# 每 2 小时执行一次
+CRON_DIR="$HERMES_DATA_DIR/cron"
+CRON_JOBS="$CRON_DIR/jobs.json"
+
+if [ -f "$CRON_JOBS" ]; then
+    # 已有 cron 配置，检查 lifecycle-heartbeat 是否存在
+    if ! python3 -c "
+import json
+d=json.load(open('$CRON_JOBS'))
+jobs=[j for j in d.get('jobs',[]) if j.get('name')=='lifecycle-heartbeat']
+print('found' if jobs else 'missing')
+" 2>/dev/null | grep -q "found"; then
+        echo "Cron exists but lifecycle-heartbeat missing, injecting..."
+        python3 -c "
+import json, uuid
+from datetime import datetime, timezone, timedelta
+f='$CRON_JOBS'
+d=json.load(open(f))
+now=datetime.now(timezone(timedelta(hours=8)))
+next_run=now.replace(minute=0,second=0,microsecond=0)+timedelta(hours=2)
+d['jobs'].append({
+    'id': uuid.uuid4().hex[:12],
+    'name': 'lifecycle-heartbeat',
+    'prompt': 'Execute lifecycle heartbeat: health check, config integrity, log analysis, insights, cleanup.',
+    'skills': [], 'skill': None, 'model': None, 'provider': None, 'base_url': None,
+    'script': 'hermes-lifecycle.sh',
+    'context_from': None,
+    'schedule': {'kind': 'cron', 'expr': '0 0/2 * * *', 'display': '0 0/2 * * *'},
+    'schedule_display': '0 0/2 * * *',
+    'repeat': {'times': None, 'completed': 0},
+    'enabled': True, 'state': 'scheduled',
+    'paused_at': None, 'paused_reason': None,
+    'created_at': now.isoformat(),
+    'next_run_at': next_run.isoformat(),
+    'last_run_at': None, 'last_status': None, 'last_error': None,
+    'last_delivery_error': None,
+    'deliver': ['local'],
+    'origin': 'start.sh-auto-inject',
+    'enabled_toolsets': None,
+    'workdir': '/data/hermes'
+})
+d['updated_at']=now.isoformat()
+json.dump(d,open(f,'w'),indent=2)
+print('lifecycle-heartbeat cron injected')
+" 2>/dev/null && echo "OK" || echo "WARN: Failed to inject cron job"
+    else
+        echo "lifecycle-heartbeat cron already configured."
+    fi
+else
+    # 首次创建 cron jobs.json
+    mkdir -p "$CRON_DIR"
+    python3 -c "
+import json, uuid
+from datetime import datetime, timezone, timedelta
+now=datetime.now(timezone(timedelta(hours=8)))
+next_run=now.replace(minute=0,second=0,microsecond=0)+timedelta(hours=2)
+d={
+    'jobs': [{
+        'id': uuid.uuid4().hex[:12],
+        'name': 'lifecycle-heartbeat',
+        'prompt': 'Execute lifecycle heartbeat: health check, config integrity, log analysis, insights, cleanup.',
+        'skills': [], 'skill': None, 'model': None, 'provider': None, 'base_url': None,
+        'script': 'hermes-lifecycle.sh',
+        'context_from': None,
+        'schedule': {'kind': 'cron', 'expr': '0 0/2 * * *', 'display': '0 0/2 * * *'},
+        'schedule_display': '0 0/2 * * *',
+        'repeat': {'times': None, 'completed': 0},
+        'enabled': True, 'state': 'scheduled',
+        'paused_at': None, 'paused_reason': None,
+        'created_at': now.isoformat(),
+        'next_run_at': next_run.isoformat(),
+        'last_run_at': None, 'last_status': None, 'last_error': None,
+        'last_delivery_error': None,
+        'deliver': ['local'],
+        'origin': 'start.sh-auto-inject',
+        'enabled_toolsets': None,
+        'workdir': '/data/hermes'
+    }],
+    'updated_at': now.isoformat()
+}
+json.dump(d,open('$CRON_JOBS','w'),indent=2)
+print('lifecycle-heartbeat cron created')
+" 2>/dev/null && echo "Cron job auto-created." || echo "WARN: Failed to create cron job"
+fi
+
 # ── Start Hermes Gateway ──
 echo "[$(date)] Starting Hermes Gateway..."
 PYTHONUNBUFFERED=1 HERMES_ACCEPT_HOOKS=1 python3 -u -m hermes_cli.main gateway run -v \