final: stable Dockerfile (cd /app, cu118 torch, preflight import)

reset: clean history (purge leaked token)