fix: self-audit — 7 issues found and corrected

perf: Sprint 2a — caching, parallel pipeline, async I/O, tests

fix(sprint-f2): fiabilité — error handling, async I/O, pagination, cache, prompts

fix(sprint-f1): sécurité — path traversal, SSRF, CORS, validation inputs

fix(profiles): add explicit PROFILES_DIR/PROMPTS_DIR env vars in Dockerfiles

fix(profiles): resolve __file__ to absolute path before parent traversal

feat(sprint4-session-a): API FastAPI — structure de base + endpoints lecture et export