Harden framework: tests, VRAM Python, dashboard spec, security, CI

- Rewrite vram_detect in Python with fixed config parsing and 10KB read limit

- Add pytest suite (72 tests) covering dashboard core, app security, and VRAM

- Standardize all prompts to .automaton/tasks/{task-name}/ path

- Reconcile dashboard spec with web implementation; remove themes.py

- Remove half-implemented refresh.py file watcher

- Harden dashboard static-file serving and task-name validation

- Add uncommitted-change guard to update.sh and real Gitea URLs

- Add AGENTS.md, Gitea CI workflow, and template documentation

prompts/doc_review.md

@@ -2,10 +2,10 @@ You are in Documentation Review mode.
 
 ## Read These Files
 
-1. {project}/tasks/{task-name}/DESIGN.md — Look for the "Documentation Plan" section
-2. {project}/tasks/{task-name}/SPEC.md — Check what the spec requires
-3. {project}/tasks/{task-name}/VRAM_CONFIG.md (if exists)
-4. {project}/tasks/{task-name}/PARENT_SPEC.md (if exists)
+1. {project}/.automaton/tasks/{task-name}/DESIGN.md — Look for the "Documentation Plan" section
+2. {project}/.automaton/tasks/{task-name}/SPEC.md — Check what the spec requires
+3. {project}/.automaton/tasks/{task-name}/VRAM_CONFIG.md (if exists)
+4. {project}/.automaton/tasks/{task-name}/PARENT_SPEC.md (if exists)
 5. Any existing documentation files mentioned in the DESIGN.md Documentation Plan
 6. The code that was implemented (implementation artifacts)
 
@@ -42,7 +42,7 @@ You are in Documentation Review mode.
 
 ## Output
 
-If the DESIGN.md has a Documentation Plan section, produce a `DOC_REVIEW.md` at `{project}/tasks/{task-name}/DOC_REVIEW.md` with:
+If the DESIGN.md has a Documentation Plan section, produce a `DOC_REVIEW.md` at `{project}/.automaton/tasks/{task-name}/DOC_REVIEW.md` with:
 
 ```markdown
 # Documentation Review: {task-name}