feat: harden OCR and production runtime

feat: complete production safety and quality gates

feat: harden prescription processing and evaluation

Fix PaddleOCR oneDNN Crash: Disable MKLDNN

Fix PaddleOCR Deployment: Add libgomp1 and lock numpy<2

Fix unterminated heredoc in Dockerfile

Fix PaddleOCR show_log missing argument at build time in Dockerfile

Support PaddleOCR v3 and legacy init args

Install OpenCV system libs for PaddleOCR in Space

Preload Paddle OCR models and stabilize runtime deps

Disable Paddle model source check for Space runtime

Use Python 3.10 base image for PaddleOCR compatibility on Space

Prepare app for local and Docker deploy