feat: Harden API, pin dependencies, and enable pytest CI gate

ci: Add CI, HF Space auto-mirror, and weekly live canary workflows