security: add sandboxed subprocess runner with CPU/memory resource limits

feat(worker): add named Celery queues (high/low priority) with task routing by repo size

feat(api): add tiered per-endpoint rate limits (sync vs async vs poll)

docs: fix stale architecture doc, add README badges, CONTRIBUTING, PR template

docs: add README, architecture docs, api docs and basic tests

chore: initialize project folder structure