Rewrite CI to lint/typecheck/audit/test only; add HPC deployment path

- Replace the Docker build/publish CI stages with ruff (lint + format
  check), ty (type check), pip-audit, and pytest run directly against
  python:3.11-slim; Docker remains for manual/server deployment only.
- Swap black/pylint/mypy for ruff/ty across pyproject.toml, and fix
  every resulting lint, format, and type diagnostic in gallery/ and
  plotstyle/.
- Fix tests broken/stale from before the package restructuring: wrong
  `utils.*` import paths, mock patch targets pointed at the wrong
  module, and PDF-conversion tests still assuming ImageMagick instead
  of the current PyMuPDF-first path. Drop test_container.py (obsolete
  Docker-container smoke tests, fully superseded elsewhere).
- Add a plain-venv + systemd --user timer deployment path
  (deploy/systemd/) for HPC login nodes without a Docker daemon, where
  public_html is already served by existing infrastructure.
- Document both in CLAUDE.md, including running CI's checks locally
  before committing.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

config.lbogner.yaml

@@ -0,0 +1,37 @@
+# Gallery Configuration for lbogner (KIT ETP HPC login nodes)
+# ==============================================================
+# Deployed via plain venv + systemd --user timer (see deploy/systemd/README.md),
+# not Docker/Compose — this path has no Docker daemon, and /web/lbogner/public_html
+# is already served by KIT's own web infrastructure.
+
+paths:
+  # Working directory where the script runs from
+  work_dir: "/work/lbogner/web"
+
+  # Web hosting directory where gallery files are served (auto-served by KIT)
+  web_folder: "/web/lbogner/public_html/"
+
+gallery:
+  plot_root: "gallery"
+  png_dpi: 400
+  backup_folder: ""
+
+ui:
+  max_recent_plots: 20
+  search_debounce_ms: 300
+
+metadata:
+  cache_enabled: true
+  inherit_from_parent: true
+
+# Data Sources
+# TODO: fill in your actual plot-producing repo output directories under
+# /work/lbogner/... and/or plot data under /ceph/... (adjust names/paths to match
+# where each cloned repo's plotstyle scripts actually write their PDFs).
+sources:
+  - name: "ttbar_analysis"
+    path: "/work/lbogner/PLACEHOLDER/ttbar_analysis/plots"
+  - name: "needle_benchmarks"
+    path: "/work/lbogner/PLACEHOLDER/needle/benchmarks/plots"
+  - name: "aido_convergence_study"
+    path: "/work/lbogner/PLACEHOLDER/aido/results_convergence/plots"