tgbot

build(docker): update images, fix context, and switch to Bearer auth

refactor(bot): extract modules from main.rs, server.rs, and client.rs

docs(agents): restructure AGENTS.md with task flow framework, cargo audit, and workflow reflection

docs(agents): remove redundant skill listing duplicated from system prompt

feat(security): implement OWASP audit fixes for auth, HITL, and hardening