fix: easter-egg ticker now properly works in Gradio app

chore: new tests, security audit, coverage enhancements, requirements update

fix: 0 test failures; FileService; real RagService; emergency probe; chat return

feat: Phase 2 (M14-M25, X05-X07) + Phase 3 experimental (M26-M31) + E2E tests + docs