feat: enforce rate limiter on finlens queries, add SECURITY.md, CONTRIBUTING.md, and .env.example templates

feat(prod-hardening): production hardening, SHA-256 model verification gate, hybrid ChromaDB store, decoupled credentials, k8s scaffolding, and MODEL_CARD.md

fix: container UID 1000 permissions & 503 health probe on HF Spaces