Harden framework: tests, VRAM Python, dashboard spec, security, CI

- Rewrite vram_detect in Python with fixed config parsing and 10KB read limit

- Add pytest suite (72 tests) covering dashboard core, app security, and VRAM

- Standardize all prompts to .automaton/tasks/{task-name}/ path

- Reconcile dashboard spec with web implementation; remove themes.py

- Remove half-implemented refresh.py file watcher

- Harden dashboard static-file serving and task-name validation

- Add uncommitted-change guard to update.sh and real Gitea URLs

- Add AGENTS.md, Gitea CI workflow, and template documentation

prompts/test_design.md

@@ -4,8 +4,8 @@ Your only job is to produce a comprehensive, explicit test specification for the
 
 ## Read These Files
 
-1. {project}/tasks/{task-name}/SPEC.md — Requirements and acceptance criteria
-2. {project}/tasks/{task-name}/DESIGN.md — Architecture and data model (if exists)
+1. {project}/.automaton/tasks/{task-name}/SPEC.md — Requirements and acceptance criteria
+2. {project}/.automaton/tasks/{task-name}/DESIGN.md — Architecture and data model (if exists)
 3. {project}/.automaton/.rules.md (if exists — project override) OR ~/.automaton/.rules.md (global default) — Project constraints
 
 ## Task
@@ -77,7 +77,7 @@ Only produce the TEST_PLAN.md after the user says "APPROVED" or equivalent.
 
 ## Output
 
-Produce a file called TEST_PLAN.md at {project}/tasks/{task-name}/TEST_PLAN.md that contains:
+Produce a file called TEST_PLAN.md at {project}/.automaton/tasks/{task-name}/TEST_PLAN.md that contains:
 
 ```markdown
 # Test Plan: {task-name}