[Push 7] Fix CI: ruff F841 noqa, format train.py, fix Docker port mapping 8000->7860

[Push 6] Suyash: CI workflow, container hardening, /transcripts endpoint, entrypoint validation, lint/format fixes