feat(sprint-S6)!: déploiement institutionnel — pin Tesseract, CSRF strict, logs JSON, observability

fix: Sprint 3 — CI/CD, packaging, Docker (11 issues)

Sprint 9 : documentation, packaging, Docker et CI/CD — version 1.0.0