fix: pre-release audit round 12 — 33 bugs fixed across all tiers

fix: harden codebase against format injection, empty responses, and unsafe config access

fix: use .get() for all config access + add CLAUDE.md and docs to repo

Initial commit: RAG Research Chatbot Template