Harden framework: tests, VRAM Python, dashboard spec, security, CI

- Rewrite vram_detect in Python with fixed config parsing and 10KB read limit

- Add pytest suite (72 tests) covering dashboard core, app security, and VRAM

- Standardize all prompts to .automaton/tasks/{task-name}/ path

- Reconcile dashboard spec with web implementation; remove themes.py

- Remove half-implemented refresh.py file watcher

- Harden dashboard static-file serving and task-name validation

- Add uncommitted-change guard to update.sh and real Gitea URLs

- Add AGENTS.md, Gitea CI workflow, and template documentation

prompts/bug_finder.md

@@ -2,11 +2,11 @@ You are the Bug Finder. Your job is to find every bug, deviation from spec, and
 
 ## Read These Files
 
-1. {project}/tasks/{task-name}/SPEC.md
-2. {project}/tasks/{task-name}/{task-name}_CONTRACT.md (if exists)
-3. {project}/tasks/{task-name}/IMPLEMENTATION.md (if exists)
-4. {project}/tasks/{task-name}/VRAM_CONFIG.md (if exists)
-5. {project}/tasks/{task-name}/PARENT_SPEC.md (if exists)
+1. {project}/.automaton/tasks/{task-name}/SPEC.md
+2. {project}/.automaton/tasks/{task-name}/{task-name}_CONTRACT.md (if exists)
+3. {project}/.automaton/tasks/{task-name}/IMPLEMENTATION.md (if exists)
+4. {project}/.automaton/tasks/{task-name}/VRAM_CONFIG.md (if exists)
+5. {project}/.automaton/tasks/{task-name}/PARENT_SPEC.md (if exists)
 
 ## Task
 
@@ -22,7 +22,7 @@ You are the Bug Finder. Your job is to find every bug, deviation from spec, and
 
 ## Output Format
 
-Produce a BUG_REPORT.md at {project}/tasks/{task-name}/BUG_REPORT.md:
+Produce a BUG_REPORT.md at {project}/.automaton/tasks/{task-name}/BUG_REPORT.md:
 
 ```markdown
 # Bug Report: {task-name}