fix: grant write permissions to GITHUB_TOKEN for CML job

fix: install canvas system dependencies in CML workflow

ci/cd: run CML on pushes, redirect space root to docs, and add conftest setup logs

ci: use slim requirements-ci.txt and tee pytest output for visibility

ci: fix push credentials in debug step and add artifact upload

ci: grant contents: write permissions to CI job

ci: add pytest failure log debug workflow

feat(ci): configure CI, Hugging Face deploy, and CML model training workflows