feat: phase 2 - state machine, AI orchestration gateway, and test suite

chore: phase 1 - setup hygiene, security hardening, and testing infrastructure

ci: add automated hugging face sync via github secrets