[albertoreyescastro]

Final low-risk polish from the full repository audit.

Changes:

• align the landing sample with the current deterministic 75/76/90/79 fixture
• remove stale PDF wording from the demo
• describe the controlled examiner and deterministic fallback accurately
• align site metadata with the recruiter-facing GitHub description and add Open Graph/Twitter metadata
• add CSP, HSTS and related low-risk security headers
• add presentation-consistency regression tests
• expand production-container CI to cover audit → deterministic examiner → PDF, invalid-request fail-closed contracts and runtime security headers
• clarify the Render free-tier wake-up loading screen in the README
• keep Dependabot automatic version updates to patch/minor; major runtime/toolchain upgrades remain deliberate manual changes
• refresh all three recruiter-facing screenshots from the final production build so README and social-preview assets match the current UI

No changes to the ML scoring engine or audit heuristics.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-23T19:07:59.091415Z	2352df4	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.