Code quality: fix all ruff warnings, add CI/CD, improve test coverage

Repo audit: fix security issues, bugs, and prepare HF Space deployment

Sprint 4: validation layer and document policy

Sprint 1: complete domain models — canonical document, geometry, provenance, readiness

Sprint 0: project foundation — structure, settings, FastAPI skeleton