fix: 12-point production audit — bugs, security, perf, reliability

chore: production-readiness pass — add missing release files, clean up code

feat: custom dashboard at / and route DeerFlow under /app

refactor: replace source compilation with official pre-built GHCR images

fix: split runtime RUN layers and add pip timeout/retries

fix: prevent OOMKilled by serializing build stages and capping Node heap

fix: align with DeerFlow's official Docker pattern — BuildKit cache + --no-install-package

fix: keep uv.lock — deleting it caused silent hang during full re-resolution

fix: reduce UV_HTTP_TIMEOUT 600→120s so stalled connections fail fast

fix: correct markitdown patch string — actual format is markitdown[all,xlsx]

fix: UV_HTTP_TIMEOUT=600 + 10 retries + markitdown debug output

fix: remove invalid --concurrent-downloads flag, use UV_CONCURRENT_DOWNLOADS env var only

fix: --concurrent-downloads is global uv flag, goes before subcommand

fix: reliable markitdown patch + --concurrent-downloads CLI flag

fix: limit uv concurrency + strip markitdown[all] heavy extras

fix: retry uv sync up to 3x for flaky HF Spaces build network

fix: raise UV_HTTP_TIMEOUT to 120s in backend-builder to prevent download timeouts

feat: restructure to HuggingClaw architecture with dashboard + Cloudflare features

rename: HuggingDeer → HuggingFlow

init: HuggingDeer — DeerFlow on Hugging Face Spaces