- add multi-stage scratch-based Dockerfile with non-root user and mTLS cert support
- add K8s Deployment, Service, ConfigMap, and Secret manifests with security hardening
- bind MONGODB_PASSWORD and SERVICE_SECRET_KEY from environment variables via viper
- restructure deploy/ directory and remove unused modelrt.cnf
- bump Go version to 1.26.3 and add event-flow-analysis doc