feat: initialize bangwen recruitment aggregation and search engine

- Rust core engine with HTTP ingestion gateway, hybrid search, and white-box resume matching
- Python edge collectors supporting declarative TOML and specialized adapters
- PostgreSQL schema migrations with pgvector embedding support
- Hardened security controls: strict CSP, terminal sanitization, and input boundary validation
- Multi-service container orchestration with dedicated non-root execution

collectors/Dockerfile

@@ -0,0 +1,20 @@
+FROM python:3.12-slim
+WORKDIR /app
+
+COPY --from=ghcr.io/astral-sh/uv:latest /uv /uvx /bin/
+
+ENV UV_COMPILE_BYTECODE=1
+ENV UV_LINK_MODE=copy
+ENV PYTHONUNBUFFERED=1
+
+COPY pyproject.toml uv.lock* ./
+RUN uv sync --frozen --no-install-project || uv sync --no-install-project
+
+RUN groupadd -g 10001 collector && useradd -u 10001 -g collector -m -s /bin/bash collector
+
+COPY . ./
+RUN chown -R collector:collector /app
+
+USER collector
+
+CMD ["uv", "run", "python", "runner.py"]