9aefa4c61c
credential pool has entries but is entirely rate-limited (exhausted): rate limits are per-model for many providers (e.g. Google Gemini), so an exhausted key for model-A may still serve model-B, and the user should stay able to select it. That fix wired `for_picker=True` into `list_picker_providers`. The two sibling interactive pickers reached by `hermes model` still called `list_authenticated_providers()` WITHOUT `for_picker=True`, so they kept hiding exhausted-pool providers: - `_aux_select_for_task` (hermes_cli/main.py) — the auxiliary-task provider/model picker. - `_configure_vision_provider_model` (hermes_cli/tools_config.py) — the vision provider/model picker. Both persist a per-task config the user runs *later* (once the momentary cooldown clears), so hiding an exhausted-pool provider here is exactly the Tests: two regressions assert each picker requests `for_picker=True` (they omitted it before the fix); the existing picker/exhausted-pool suite still passes (6 total).