Fix: map widget + mcp-address subagent wiring

[YASSERRMD]

Summary

• Wires the joblantern app to an mcp-address MCP server, emitting address.geocoded (with lat/lon/display_name) or address.not_found evidence facts per submission.
• Adds a Leaflet 1.9.4 map widget to the verdict page that plots a pin when an address.geocoded fact is present (self-hosted leaflet — no CDN).
• Relaxes CSP to allow OSM tile images and the Leaflet inline bootstrap.
• Adds deploy/docker-compose.smoketest.yml — postgres + mcp-address + app — and a cmd/joblantern/Dockerfile. Existing deploy/Dockerfile.dev golang base bumped from 1.23 → 1.25 to match go.mod.

Test plan

• docker compose -f deploy/docker-compose.smoketest.yml up -d --build brings the stack up healthy.
• Verdict with a real address (Werner-von-Siemens-Straße 1, Munich) → GREEN, map renders with pin at 48.1443, 11.5749.
• Verdict with a gibberish address → RED, address.not_found evidence row, no map.
• CSP still blocks unexpected origins (no console errors on the verdict page).