Integrate PaddleOCR and redesign UI with Xerox Star aesthetic

Wire HF_TOKEN secret into settings and propagate to environment

Code quality: fix all ruff warnings, add CI/CD, improve test coverage

Repo audit: fix security issues, bugs, and prepare HF Space deployment

Sprint 11: minimal web frontend — upload, jobs, providers, exports

Sprint 13: comprehensive test fixtures and end-to-end hardening

Sprint 12: Docker deployment and viewer pipeline integration

Sprint 10: ViewerProjection builder — overlay generation and inspection

Sprint 9: complete provider system — runtimes, adapters, registry, resolver

Sprint 8: FastAPI routes — providers, jobs, exports, viewer

Sprint 7: persistence layer and job orchestration

Sprint 6: enricher subsystem — 6 enrichers with pipeline and policy control

Sprint 5: PAGE XML serializer and dual export

Sprint 4: validation layer and document policy

Sprint 3: vertical slice — PaddleOCR adapter, normalization pipeline, ALTO serializer

Sprint 2: geometry subsystem — operations, transforms, normalization, quantization

Sprint 1: complete domain models — canonical document, geometry, provenance, readiness

Sprint 0: project foundation — structure, settings, FastAPI skeleton