Dockerfile: swap vtk for vtk-osmesa so off-screen rendering works headless

Dockerfile: bump CADGENBENCH_SHA to b22a53c (ProcessPool spawn fix)

Dockerfile + submit: swap Chromium for VTK; bump eval workers 1 -> 4

Dockerfile: bump CADGENBENCH_SHA to 056cfbb (invalid-candidate fast path)

Dockerfile: bump CADGENBENCH_SHA to 9bd02fb (lazy baseline import)

submit: move handle_submit into its own module + add validation pipeline

Dockerfile: bump CADGENBENCH_SHA to ed31274 (parallel evaluate)

Dockerfile: copy all Python modules, not just app.py

Dockerfile: bump CADGENBENCH_SHA to 1747493 (Hub-only fixtures)

Dockerfile: bump CADGENBENCH_SHA to 36ac6b4 (Hub-aware paths.py)

scrub for the cadgenbench Public flip: drop NIST + remove build secret

Dockerfile: use actual GH username in classic-PAT URL, not x-access-token

Dockerfile: use x-access-token:TOKEN URL form for classic PAT

Dockerfile: point cadgenbench install at huggingface/cadgenbench

step 6 (A2): switch space to sdk:docker, install cadgenbench from private LeForge via GH_PAT build secret