Harden framework: tests, VRAM Python, dashboard spec, security, CI

- Rewrite vram_detect in Python with fixed config parsing and 10KB read limit

- Add pytest suite (72 tests) covering dashboard core, app security, and VRAM

- Standardize all prompts to .automaton/tasks/{task-name}/ path

- Reconcile dashboard spec with web implementation; remove themes.py

- Remove half-implemented refresh.py file watcher

- Harden dashboard static-file serving and task-name validation

- Add uncommitted-change guard to update.sh and real Gitea URLs

- Add AGENTS.md, Gitea CI workflow, and template documentation

tasks/developer-experience-gitea-ci/IMPLEMENTATION.md

@@ -0,0 +1,22 @@
+# Implementation: Developer Experience and Gitea CI
+
+## Summary
+Improved framework maintainability by adding contributor documentation, Gitea CI, packaging configuration, and cleaning up unused template files.
+
+## Files Changed
+- `AGENTS.md` (new)
+- `.gitea/workflows/ci.yml` (new)
+- `templates/contract-template.md` (deleted)
+- `templates/README.md` (new)
+- `CHANGELOG.md` (updated with all recent changes)
+- `pyproject.toml` (root config created in Task 3)
+
+## Verification
+- `AGENTS.md` contains build/test commands and conventions.
+- `.gitea/workflows/ci.yml` references the correct test commands.
+- `templates/contract-template.md` no longer exists.
+
+## Decisions
+- Gitea is the CI platform (matches existing infrastructure).
+- CI runs py_compile, pytest, and bash syntax checks.
+- Unused contract template removed; remaining templates documented.