chore(sync): mirror backend .py + Dockerfile to Space (hf-sync-backend)

Automated backend sync from szl-holdings/a11oy main via hf-sync-backend.
Updated (differed from the Space): Dockerfile, serve.py
Deleted (gone from the repo + Dockerfile COPY set): (none)

Keeps the Space-built backend (serve.py + the Dockerfile-COPY'd .py
modules) identical to GitHub main so the Space never rebuilds from a
stale backend, new endpoints don't 404 there, and orphaned modules
removed from the repo don't linger in the Space tree.

Dockerfile

@@ -318,6 +318,12 @@ COPY web/living-anatomy.html ./web/living-anatomy.html
 # _ptg_serve. Without these COPYs the guarded import falls back and /nemo 404s.
 COPY a11oy_nemo_core.py ./
 COPY web/nemo.html ./web/nemo.html
+# ADDITIVE (Lane F1, 2026-06-14): the 3D/holographic SUBSTRATE demo page, served at
+# /holo + /a11oy/holo via _ptg_serve. Loads the shared kit /static/shared/szl_holo3d.js
+# (0 CDN). image-only like the other web/*.html demo pages (declared in
+# .github/copy-sync-lockstep.json image_only_assets; baked into the GitHub-built image,
+# live after a factory rebuild). Without this COPY /holo would 404 to the SPA shell.
+COPY web/holo.html ./web/holo.html
 # ADDITIVE (Lane A AGENTIC CORE, Dev A, 2026-06-14; QA9 restore 2026-06): the
 # resumable ReAct agent-loop core module. Per-file COPY (this Dockerfile uses no
 # COPY . .). a11oy_react_core.py is imported by serve.py (try/except guarded) and
@@ -757,7 +763,7 @@ COPY conduction_aphasia.py szl_a11oy_live_feeds.py szl_jack.py ./
 
 # --- ESTATE ECOSYSTEM FOUNDATION (Dev5, 2026-06): byte-identical shared modules ---
 # 3 shared JS (label engine / receipt-cosign / codename sanitizer) + codename gate + ecosystem router.
-COPY static/shared/szl_label_engine.js static/shared/szl_receipt_cosign.js static/shared/szl_codename_sanitizer.js ./static/shared/
+COPY static/shared/szl_label_engine.js static/shared/szl_receipt_cosign.js static/shared/szl_codename_sanitizer.js static/shared/szl_holo3d.js ./static/shared/
 COPY szl_codename_gate.py szl_ecosystem_routes.py ./
 
 # --- GOVERNANCE / EVAL / CALIBRATION layer (Dev B, 2026-06): ADDITIVE ---

serve.py

@@ -987,6 +987,14 @@ try:
     app.add_api_route("/hologram", _ptg_serve("hologram.html"), methods=["GET"], include_in_schema=False)
     app.add_api_route("/a11oy/hologram", _ptg_serve("hologram.html"), methods=["GET"], include_in_schema=False)
 
+    # /holo — SZL 3D HOLOGRAPHIC SUBSTRATE demo (Lane F1). Full-screen sovereign page
+    # that loads the shared kit /static/shared/szl_holo3d.js (0 CDN) and renders the
+    # holographic shell + a SAMPLE proof-DAG + a Lambda-driven trust sphere + a
+    # signed-pulse edge animation, all with honest SAMPLE labels. WebGL2 baseline,
+    # honest 2D fallback. Lambda = Conjecture 1 (< 1.0). 0 visible codenames.
+    app.add_api_route("/holo", _ptg_serve("holo.html"), methods=["GET"], include_in_schema=False)
+    app.add_api_route("/a11oy/holo", _ptg_serve("holo.html"), methods=["GET"], include_in_schema=False)
+
     # /chat + /a11oy/chat -> /code consolidation (founder-directed; the only removal).
     async def _ptg_chat_to_code() -> Response:
         return _PTG_Redirect(url="/code", status_code=302)
@@ -6771,6 +6779,8 @@ try:
         "szl_label_engine.js": _VENDOR_JS_CT,
         "szl_receipt_cosign.js": _VENDOR_JS_CT,
         "szl_codename_sanitizer.js": _VENDOR_JS_CT,
+        # Lane F1: the shared 3D/holographic substrate kit (byte-identical a11oy<->killinchu).
+        "szl_holo3d.js": _VENDOR_JS_CT,
     }
 
     @app.get("/static/shared/{fname}")