fix(deploy): harden container runtime and unify research / checkpoint roots

build(deploy): add docker image and compose for hf spaces