Function set_hermetic 

pub fn set_hermetic(on: bool)

2026-09-25: Publish met serve --hermetic, before the first hermetic_enabled call, which caches its answer. Only true is published, so without the flag METRALE_HERMETIC=1 still decides.