fix: server entry point uses main() function as required by multi-mode validator

fix: add uv.lock, server/app.py, project.scripts, and openenv-core dependency