Fix HF Space Docker build

Fix production demo auth and deployment layout

fix: add rejectUnauthorized=false for Neon SSL in Alpine

fix: add raw DB diagnostic

fix: better error details

fix: missions DI endpoint

test: add diag missions endpoint

fix: remove conflicting raw routes, NestJS controllers work now

fix: use app.get() for DI in raw routes

test: remove global prefix to see if NestJS controllers work

test: diag controller to trace DI chain

clean: finish cleanup

clean: remove test files

clean: remove debug imports

fix: remove broken exception filter

fix: import APP_FILTER from @nestjs/core

debug: global exception filter with error messages

debug: add Fastify error handler with messages

test: check if DB injection works in controller

fix: inject demo userId via Fastify hook, remove Clerk guard from controllers

fix: disable Clerk global guard when DEMO_MODE=true

test: add TestController without global prefix

debug: add env var check endpoint

fix: raw capabilities route, remove capabilities controller

fix: use full monorepo in Docker (tsx can transpile symlinked workspace packages)

fix: precompile TS to JS for prod deploy

fix: precompile all TS to JS for production Docker deploy

fix: set TSX_NODE_MODULES=1 to transpile workspace packages in node_modules

fix: raw Fastify health route, remove health controller

fix: use raw Fastify health route to bypass NestJS pipeline

fix: use tsx --tsconfig flag for decorator support

fix: copy tsconfig.json into deploy for tsx decorator support

fix: add HF YAML frontmatter to README

deploy: Vercel config

chore: rename Dockerfile.hf → Dockerfile for HF Spaces

fix: verify Clerk tokens in production

docs: Add partner-facing env file setup to DEPLOY.md

chore: Add .env.example template for backend local dev

fix: Add /profile to protected routes, comprehensive DEPLOY.md

fix: Critical auth + ownership + container bugs from audit

feat: Full Clerk Google OAuth + user profiles + combined API/Worker deploy

feat: Redesign landing page with widescreen hero and interactive autopilot simulator

docs: add comprehensive README for CourtMitra MissionOS

fix: demo-data typecheck errors, remove unused EscalateSocialCard props

fix: state regression rank guards, social escalate persistence, missing info inputs, back buttons, demo data seed

Merge remote-tracking branch 'origin/main'

fix: email body uses user's actual words, auto-fill destination from route rule data, add issue domain switching

Phase 1 complete: guided frontend + adversarial API fixes + i18n

fix: allow non-email action types (generate_packet, manual_packet, etc.) without external adapter

Merge branch 'main' into vanshik