feat: Add DevSecOps tools, Woodpecker proxy, Vault persistent storage, pitch-deck annex slides

- Install Gitleaks, Trivy, Grype, Syft, Semgrep, Bandit in backend-core Dockerfile
- Add Woodpecker SQLite proxy API (fallback without API token)
- Mount woodpecker_data volume read-only to backend-core
- Add backend proxy fallback in admin-core Woodpecker route
- Add Vault file-based persistent storage (config.hcl, init-vault.sh)
- Auto-init, unseal and root-token persistence for Vault
- Add 6 pitch-deck annex slides (Assumptions, Architecture, GTM, Regulatory, Engineering, AI Pipeline)
- Dynamic margin/amortization KPIs in BusinessModelSlide
- Market sources modal with citations in MarketSlide
- Redesign nginx landing page to 3-column layout (Lehrer/Compliance/Core)
- Extend MkDocs nav with Services and SDK documentation sections
- Add SDK Protection architecture doc

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

pitch-deck/lib/hooks/useSlideNavigation.ts

@@ -17,6 +17,12 @@ const SLIDE_ORDER: SlideId[] = [
   'financials',
   'the-ask',
   'ai-qa',
+  'annex-assumptions',
+  'annex-architecture',
+  'annex-gtm',
+  'annex-regulatory',
+  'annex-engineering',
+  'annex-aipipeline',
 ]
 
 export const TOTAL_SLIDES = SLIDE_ORDER.length