v2.0 pass 2: one-shot -z fix, 300s pull poll, model-rank boundaries, postgres validation, UI picker, cleanup, HEALTHCHECK

v2.0: reliability release — global scan dedup, mongo+lobechat discovery, tavern chat/injection/auth fixes, honest CI claims, boot hardening

Upload tavern.sh with huggingface_hub