- add three-stage build table (builder/certs/runtime) to section 3.1
- add --build-arg USER_ID option for custom non-root UID
- add method 2: load pre-built local image (e.g. eventrt:v1) into Minikube
- add smoke test subsection 3.1.1 with size/inspect/run checks
- bump base image from golang:1.25-alpine to golang:1.26-alpine
- remove bundled config.example.yaml from image (config should be mounted at runtime)
- add multi-stage scratch-based Dockerfile with non-root user and mTLS cert support
- add K8s Deployment, Service, ConfigMap, and Secret manifests with security hardening
- bind MONGODB_PASSWORD and SERVICE_SECRET_KEY from environment variables via viper
- restructure deploy/ directory and remove unused modelrt.cnf
- bump Go version to 1.26.3 and add event-flow-analysis doc