Security: replace pickle GPL cache with JSON; document accepted exec risk

Cap conversation history and code-output size to bound credit cost

Clean up dead code, fix two bugs, remove unused abstractions

Align project layout with HF Spaces and FastMCP conventions