fix: lightweight Chinese font (NotoSansSC OTF ~16MB via curl)

- Revert apt fonts-noto-cjk (120MB+ caused OOM)
- Download only NotoSansSC-Regular.otf + Bold.otf (~16MB total)
- Add fontconfig for font cache
- Much lighter than full CJK font package

Dockerfile

@@ -1,10 +1,9 @@
 FROM python:3.12-slim
 
-# System deps + Chinese fonts
+# System deps
 RUN apt-get update && apt-get install -y --no-install-recommends \
-    git curl gnupg2 \
-    fonts-noto-cjk \
-    && fc-cache -f && rm -rf /var/lib/apt/lists/*
+    git curl gnupg2 fontconfig \
+    && rm -rf /var/lib/apt/lists/*
 
 WORKDIR /app
 
@@ -22,6 +21,14 @@ RUN pip install --quiet --upgrade pip && \
     pip install --quiet -e "/app/mempalace" && \
     pip install --quiet -e "/app/hermes-agent[feishu,mcp,cron,pty]" 2>&1 | tail -10
 
+# Chinese font (download Noto Sans SC Regular only, ~8MB)
+RUN mkdir -p /usr/share/fonts/truetype/noto && \
+    curl -sL "https://github.com/googlefonts/noto-cjk/raw/main/Sans/SubsetOTF/SC/NotoSansSC-Regular.otf" \
+    -o /usr/share/fonts/truetype/noto/NotoSansSC-Regular.otf && \
+    curl -sL "https://github.com/googlefonts/noto-cjk/raw/main/Sans/SubsetOTF/SC/NotoSansSC-Bold.otf" \
+    -o /usr/share/fonts/truetype/noto/NotoSansSC-Bold.otf && \
+    fc-cache -f
+
 # Create hermes home
 RUN mkdir -p /root/.hermes