Harden framework: tests, VRAM Python, dashboard spec, security, CI

- Rewrite vram_detect in Python with fixed config parsing and 10KB read limit

- Add pytest suite (72 tests) covering dashboard core, app security, and VRAM

- Standardize all prompts to .automaton/tasks/{task-name}/ path

- Reconcile dashboard spec with web implementation; remove themes.py

- Remove half-implemented refresh.py file watcher

- Harden dashboard static-file serving and task-name validation

- Add uncommitted-change guard to update.sh and real Gitea URLs

- Add AGENTS.md, Gitea CI workflow, and template documentation

tasks/developer-experience-gitea-ci/SPEC.md

@@ -0,0 +1,32 @@
+# SPEC: Developer Experience and Gitea CI
+
+## Goal
+Improve framework maintainability with documentation, CI, and cleanup.
+
+## Requirements
+1. Create `AGENTS.md` with:
+   - How to run tests
+   - How to run the dashboard
+   - Code/style conventions
+   - How to add/update prompts
+2. Create `.gitea/workflows/ci.yml` that runs:
+   - `python -m py_compile` on all Python files
+   - `python -m pytest`
+   - `bash -n` on all shell scripts (or `shellcheck` if available)
+3. Update `pyproject.toml` with optional dependency groups.
+4. Delete `templates/contract-template.md` (confirmed unused).
+5. Document remaining templates in `templates/README.md` or `AGENTS.md`.
+6. Update `CHANGELOG.md` with entries for all completed work.
+
+## Acceptance Criteria
+- [ ] `AGENTS.md` exists and is useful to a new contributor.
+- [ ] Gitea CI file exists and would pass on the current codebase.
+- [ ] `contract-template.md` is removed.
+- [ ] `CHANGELOG.md` reflects the new work.
+
+## Non-Goals
+- Migrating to GitHub Actions.
+- Rewriting documentation unrelated to the audit fixes.
+
+## Stop Condition
+When all acceptance criteria are met, output "CONTRACT_MET".