Harden framework: tests, VRAM Python, dashboard spec, security, CI

- Rewrite vram_detect in Python with fixed config parsing and 10KB read limit

- Add pytest suite (72 tests) covering dashboard core, app security, and VRAM

- Standardize all prompts to .automaton/tasks/{task-name}/ path

- Reconcile dashboard spec with web implementation; remove themes.py

- Remove half-implemented refresh.py file watcher

- Harden dashboard static-file serving and task-name validation

- Add uncommitted-change guard to update.sh and real Gitea URLs

- Add AGENTS.md, Gitea CI workflow, and template documentation

tasks/add-pytest-test-suite/IMPLEMENTATION.md

@@ -0,0 +1,28 @@
+# Implementation: Add pytest Test Suite
+
+## Summary
+Added a comprehensive pytest suite covering the dashboard core modules and the new VRAM detection script.
+
+## Files Changed
+- `tests/test_scope.py` (new)
+- `tests/test_task.py` (new)
+- `tests/test_board.py` (new)
+- `tests/test_stats.py` (new)
+- `tests/test_config.py` (new)
+- `tests/test_app.py` (new)
+- `tests/test_vram_detect.py` (new)
+- `tests/test_prompt_paths.py` (created earlier in Task 5)
+- `pyproject.toml` (new root config with optional dependencies)
+- `automaton/dashboard/pyproject.toml` (deleted to avoid conflict)
+- `.gitignore` (updated for pytest cache, egg-info, venvs)
+
+## Bug Fixes Found During Testing
+- `DashboardHandler._validate_task_name` was an instance method; converted to `@staticmethod`.
+- `scripts/vram_detect.py` regex for override context window did not match `**Override context window**`.
+- `scripts/vram_detect.py` `_parse_token_value` did not handle decimal values like `5.6k`.
+
+## Verification
+- `python -m pytest tests/` passes: **70 tests passed**.
+
+## Notes
+- The root `pyproject.toml` now defines `automaton` package discovery and optional dependency groups.