Warm agent import on main thread to avoid off-thread signal crash

Add Dockerfile that builds and serves the Hermes API