Harden framework: tests, VRAM Python, dashboard spec, security, CI

- Rewrite vram_detect in Python with fixed config parsing and 10KB read limit

- Add pytest suite (72 tests) covering dashboard core, app security, and VRAM

- Standardize all prompts to .automaton/tasks/{task-name}/ path

- Reconcile dashboard spec with web implementation; remove themes.py

- Remove half-implemented refresh.py file watcher

- Harden dashboard static-file serving and task-name validation

- Add uncommitted-change guard to update.sh and real Gitea URLs

- Add AGENTS.md, Gitea CI workflow, and template documentation

README.md

@@ -10,7 +10,7 @@ Before you can use the framework in any project, you must install the core logic
 
 ```bash
 # Clone the framework into the global config directory
-git clone [INSERT_FRAMEWORK_REPO_URL_HERE] ~/.automaton
+git clone http://10.37.0.86:3003/hermes/automaton ~/.automaton
 
 # Enter the directory
 cd ~/.automaton
@@ -96,7 +96,7 @@ For low-VRAM systems (8GB, 16GB), set your VRAM limits in `~/.automaton/config.m
 - **Max peak context per sub-task**: 12k tokens
 ```
 
-**Auto-detection**: When `Auto-detect: Yes`, the Orchestrator runs `scripts/vram_detect.sh` to probe:
+**Auto-detection**: When `Auto-detect: Yes`, the Orchestrator runs `scripts/vram_detect.py` to probe:
 - GPU VRAM (via `nvidia-smi`)
 - System RAM (via `free`)
 - Model context window (from config.md or API config files)
@@ -173,7 +173,7 @@ When a task is decomposed, the Orchestrator creates sub-tasks under `tasks/{pare
 - `workflow.md`: The state machine governing the Autopilot lifecycle.
 - `test_design.md`: Produces a TEST_PLAN.md — an explicit test specification before implementation.
 - `decompose.md`: Breaks a task into VRAM-sized sub-tasks.
-- `scripts/vram_detect.sh`: Auto-detects GPU VRAM, RAM, model context window, and framework overhead.
+- `scripts/vram_detect.py`: Auto-detects GPU VRAM, RAM, model context window, and framework overhead.
 - `contracts/vram_config.md`: Contract for VRAM-aware task decomposition.
 
 ## Layered File System