chore(sync): mirror backend .py + Dockerfile to Space (hf-sync-backend)

Automated backend sync from szl-holdings/a11oy main via hf-sync-backend.
Updated (differed from the Space): serve.py
Deleted (gone from the repo + Dockerfile COPY set): (none)

Keeps the Space-built backend (serve.py + the Dockerfile-COPY'd .py
modules) identical to GitHub main so the Space never rebuilds from a
stale backend, new endpoints don't 404 there, and orphaned modules
removed from the repo don't linger in the Space tree.

serve.py

@@ -1154,6 +1154,20 @@ try:
     # codename. Replaces the prior 200 SPA shell that read nothing real.
     app.add_api_route("/immune", _ptg_serve("immune.html"), methods=["GET"], include_in_schema=False)
     app.add_api_route("/a11oy/immune", _ptg_serve("immune.html"), methods=["GET"], include_in_schema=False)
+    # MATERIALS (Q'allariy) tab (2026-06-16): the honest, user-visible Verifiable
+    # Alloy & Crystal Discovery surface. Standalone sovereign page (0 runtime CDN),
+    # binds to live /api/a11oy/v1/materials/* — a crystal-novelty form that POSTs to
+    # /materials/novelty (signed Khipu novelty cert + isometry-invariant PDD
+    # fingerprint digest), a PAC-Bayes /certify panel, and an Immune /screen panel
+    # (falls back to /api/a11oy/v1/immune/verdict if /screen not yet live). Honest
+    # footer claim sheet (PROVEN/CONJECTURE/ROADMAP per Lean ref). Title "Materials
+    # — Verifiable Alloy & Crystal Discovery". NEVER a codename. /certify + /screen
+    # are built in parallel; the page shows a graceful 'endpoint deploying' state
+    # (no fake result) on 404. web/materials.html is per-file COPY'd below and
+    # declared an accepted divergence in .github/hf-module-drift-allow.json (same
+    # baked-only image_only pattern as web/immune.html + web/energy.html).
+    app.add_api_route("/materials", _ptg_serve("materials.html"), methods=["GET"], include_in_schema=False)
+    app.add_api_route("/a11oy/materials", _ptg_serve("materials.html"), methods=["GET"], include_in_schema=False)
     # SZL-NEMO CORE tab (Lane I1, 2026-06-14): the sovereign governed agent model
     # skeleton. Standalone sovereign page (0 runtime JS CDN; loads /static/shared
     # label + receipt modules), binds to live /api/a11oy/v1/nemo/* — governed-MoE