chore: bootstrap TezOracle public repository

[AK-APRIORIT]

• add repo layout (src/, tests/, config/, docs/, workflows)
• add Apache-2.0 license, .gitignore, .env.example (no secrets)
• add README, ARCHITECTURE, SECURITY, ROADMAP docs
• add TypeScript + Python CI skeleton (no packing-parity yet)
• add pyproject.toml + requirements-dev.txt so pytest resolves src/contract

[KevinMehrabi]

Thank you. The repository structure and security documentation are moving in the right direction, but I am requesting the following corrections before approving the bootstrap PR:

1. Fix or remove the README links to files that are not present in this branch:

• docs/ENGINEERING_RESPONSE_RU.md
• docs/TEZFIN_ORACLE_ENGINEERING_RESPONSE_2026_08_14.md
• IMPLEMENTATION_PLAN.md

The bootstrap branch should not leave broken documentation links, even temporarily.

2. Pin GitHub Actions to immutable full commit SHAs rather than mutable version tags such as:

• actions/checkout@v4
• actions/setup-node@v4
• actions/setup-python@v5

Please retain comments identifying the corresponding release versions.

3. Make the build dependencies reproducible:

• Pin Python dependencies to exact versions.
• Do not run an unrestricted pip install --upgrade pip in CI.
• Define and pin the supported Node version consistently across CI, documentation, and a version file such as .nvmrc.
• Ensure both local and CI installation paths use committed lockfiles and deterministic commands.

4. Confirm that no CI, test, or documentation path requires production credentials or secrets.

Once these bootstrap and reproducibility issues are corrected, PR #2 should be ready for another review.