feat(tools): add TinyFish cloud browser provider

Adds TinyFish (tinyfish.ai) as a cloud browser provider alongside
Browserbase, Browser Use, and Firecrawl. Sessions are created via a
simple POST that returns a CDP websocket URL.

- tools/browser_providers/tinyfish.py — TinyFishBrowserProvider
- tools/browser_tool.py — register in _PROVIDER_REGISTRY
- hermes_cli/tools_config.py — add to onboarding provider picker
- hermes_cli/config.py — TINYFISH_API_KEY env var entries
- hermes_cli/nous_subscription.py — browser label + feature state
- website/docs — document env vars and setup

Based on PR #6329 by @simantak-dabhade.

website/docs/reference/environment-variables.md

@@ -118,6 +118,9 @@ For native Anthropic auth, Hermes prefers Claude Code's own credential files whe
 | `BROWSERBASE_PROJECT_ID` | Browserbase project ID |
 | `BROWSER_USE_API_KEY` | Browser Use cloud browser API key ([browser-use.com](https://browser-use.com/)) |
 | `FIRECRAWL_BROWSER_TTL` | Firecrawl browser session TTL in seconds (default: 300) |
+| `TINYFISH_API_KEY` | TinyFish API key for cloud browser ([agent.tinyfish.ai](https://agent.tinyfish.ai/api-keys)) |
+| `TINYFISH_API_URL` | TinyFish browser API URL override for staging/dev (optional) |
+| `TINYFISH_BROWSER_TIMEOUT` | TinyFish browser session inactivity timeout in seconds (default: 300) |
 | `BROWSER_CDP_URL` | Chrome DevTools Protocol URL for local browser (set via `/browser connect`, e.g. `ws://localhost:9222`) |
 | `CAMOFOX_URL` | Camofox local anti-detection browser URL (default: `http://localhost:9377`) |
 | `BROWSER_INACTIVITY_TIMEOUT` | Browser session inactivity timeout in seconds |