Harden framework: tests, VRAM Python, dashboard spec, security, CI

- Rewrite vram_detect in Python with fixed config parsing and 10KB read limit

- Add pytest suite (72 tests) covering dashboard core, app security, and VRAM

- Standardize all prompts to .automaton/tasks/{task-name}/ path

- Reconcile dashboard spec with web implementation; remove themes.py

- Remove half-implemented refresh.py file watcher

- Harden dashboard static-file serving and task-name validation

- Add uncommitted-change guard to update.sh and real Gitea URLs

- Add AGENTS.md, Gitea CI workflow, and template documentation

tasks/standardize-task-path-conventions/IMPLEMENTATION.md

@@ -0,0 +1,25 @@
+# Implementation: Standardize Task Path Conventions
+
+## Summary
+Updated all prompts under `prompts/` to use the canonical task path `{project}/.automaton/tasks/{task-name}/` instead of the deprecated `{project}/tasks/{task-name}/`.
+
+## Files Changed
+- `prompts/decompose.md`
+- `prompts/test_design.md`
+- `prompts/doc_review.md`
+- `prompts/workflow.md`
+- `prompts/referee.md`
+- `prompts/adversarial_bug_find.md`
+- `prompts/research.md`
+- `prompts/design.md`
+- `prompts/implement.md`
+- `prompts/bug_finder.md`
+- `tests/test_prompt_paths.py` (new regression test)
+
+## Verification
+- `rg "\{project\}/tasks/\{task-name\}" prompts/ templates/` returns no matches.
+- `python -m pytest tests/test_prompt_paths.py -v` passes (27 tests).
+
+## Decisions
+- Templates under `templates/tasks/` did not contain legacy paths.
+- The regression test lives in `tests/test_prompt_paths.py` and will fail CI if a legacy path is reintroduced.