fix(deploy): make entrypoint.sh executable in image and git index

fix(deploy): harden container runtime and unify research / checkpoint roots

build(deploy): add docker image and compose for hf spaces