build(ci): uv toolchain, release-please semver; feat(skills): vendor tools self-contained (no symlinks, relative refs)

- bin/db/psql-yq + bin/web/search + tools/{yamlout,websearch} vendored as real files
- bin/db/ssh-tunnel added (OnlyOffice VM pg on 5433)
- skills reference local bin/ paths; no agent-skills/abs links in git
- pyproject.toml + uv.lock; CI installs via uv sync --frozen
- release-please auto-tags semver from conventional commits when green
- LICENSE MIT, badges/mermaid README

docker/.dockerignore

@@ -0,0 +1,14 @@
+# .dockerignore - keep the build context lean.
+.venv
+var
+.git
+.github
+__pycache__
+*.pyc
+*.lbug
+*.lbug.*
+.cache
+.secrets
+.skills-tmp
+docker/.dockerclean
+docs/.build