fix: Tectonic sanitizer regex must require uppercase after fa

fix: sanitize fontawesome OTF for Tectonic + dedupe keywords (no duplicates)

fix: warm-compile real resume in Docker + surface compiler log