fix: evidence-gated ATS pipeline — stop scraped-page contamination & fabrication

fix: sanitize fontawesome OTF for Tectonic + dedupe keywords (no duplicates)

fix: warm-compile real resume in Docker + surface compiler log

feat(09-03): structured keyword placement for hardcoded resume [R22]