chore(sync): mirror backend .py + Dockerfile to Space (hf-sync-backend)

Automated backend sync from szl-holdings/a11oy main via hf-sync-backend.
Updated (differed from the Space): routers/series_a_control_plane.py
Deleted (gone from the repo + Dockerfile COPY set): (none)

Keeps the Space-built backend (serve.py + the Dockerfile-COPY'd .py
modules) identical to GitHub main so the Space never rebuilds from a
stale backend, new endpoints don't 404 there, and orphaned modules
removed from the repo don't linger in the Space tree.

routers/series_a_control_plane.py

@@ -1067,6 +1067,13 @@ def _event_cursor(request: Request) -> int:
     return cursor
 
 
+def _asset_cache_control(request: Request) -> str:
+    revision = _git_revision()
+    if revision != "UNKNOWN" and request.query_params.get("v") == revision:
+        return "public,max-age=31536000,immutable"
+    return "no-store"
+
+
 def register(app: FastAPI, ns: str = "a11oy", *, db_path: str | None = None) -> dict[str, Any]:
     if any(getattr(route, "path", None) == f"/api/{ns}/v1/series-a/status" for route in app.router.routes):
         return {"ok": True, "state": "ALREADY_REGISTERED", "routes": []}
@@ -1077,17 +1084,36 @@ def register(app: FastAPI, ns: str = "a11oy", *, db_path: str | None = None) ->
     async def page(request: Request) -> Response:
         if request.method == "HEAD":
             return Response(status_code=200, media_type="text/html")
-        return HTMLResponse(_asset("index.html"), headers={"cache-control": "no-store"})
+        html = _asset("index.html").replace("__SOURCE_REVISION__", _git_revision())
+        return HTMLResponse(html, headers={"cache-control": "no-store"})
 
     async def js(request: Request) -> Response:
+        headers = {"cache-control": _asset_cache_control(request)}
         if request.method == "HEAD":
-            return Response(status_code=200, media_type="application/javascript")
-        return Response(_asset("app.js"), media_type="application/javascript", headers={"cache-control": "public,max-age=300"})
+            return Response(
+                status_code=200,
+                media_type="application/javascript",
+                headers=headers,
+            )
+        return Response(
+            _asset("app.js"),
+            media_type="application/javascript",
+            headers=headers,
+        )
 
     async def css(request: Request) -> Response:
+        headers = {"cache-control": _asset_cache_control(request)}
         if request.method == "HEAD":
-            return Response(status_code=200, media_type="text/css")
-        return Response(_asset("styles.css"), media_type="text/css", headers={"cache-control": "public,max-age=300"})
+            return Response(
+                status_code=200,
+                media_type="text/css",
+                headers=headers,
+            )
+        return Response(
+            _asset("styles.css"),
+            media_type="text/css",
+            headers=headers,
+        )
 
     async def status(request: Request) -> Response:
         payload = service.latest_status()