Split of oversized PR: tracking and review checklist

[d-ulker]

[x] upload hf model script + env examples — branch feature/upload-hf-model-min (merged, PR #56)
[ ] flexible API timeouts + no PII — branch feature/flexible-api-timeouts
[x] docs: deployment guides/checklist — branch feature/docs-deployment-guides (merged/closed)
[x] docs: models README — branch chore/models-readme (merged/closed)
[x] chore: .gitignore addendum — branch chore/gitignore-addendum (merged/closed)
[ ] chore: changelog additions — branch chore/changelog-additions
[ ] tests: path/validation — prefer tests/review-validation-v3 (supersedes feature/tests-validate-path)
[ ] docs+tests: security fixes/review — prefer docs/security-fixes-notes (supersedes feature/tests-security-fixes)
[ ] docs: CODE_REVIEW_FIXES_V3 — branch docs/code-review-fixes-v3
Notes:
Superseded branches to close: feature/tests-validate-path, feature/tests-security-fixes.