refactor: move WebUI fragments into templates

[Mr-Sunglasses]

Summary

• Move WebUI fragment markup and debug Swagger markup into Jinja templates, leaving Python fragments responsible for data preparation.
• Add a shared auto-escaping rendering boundary with reusable formatting and URL filters.
• Add WPS 1.8.0 with its optional local MCP server; enforce WPS on the new rendering module while the existing repository baseline is remediated separately.

Verification

• just lint
• just type-check
• just package
• just unit (487 passed)
• just compose
• Container build (Dockerfiles unchanged)
• Docs updated for setup, network, or configuration changes (not needed)

Privacy and security

• No secrets, recordings, transcripts, or private hostnames added
• No weakening of bearer auth, upload limits, retention, or default binding without discussion

[netlify]

✅ Deploy Preview for voca-gateway canceled.

Name	Link
🔨 Latest commit	ac59ca4
🔍 Latest deploy log	https://app.netlify.com/projects/voca-gateway/deploys/6a97a7774baa780008fe625a

[greptile-apps]

Mr-Sunglasses has reached the 50-credit limit for trial accounts. To continue receiving code reviews, upgrade your plan.

[jatinkrmalik]

@Mr-Sunglasses landing this. WebUI fragments now render through Jinja with autoescape. About is still the old Python HTML path; that can follow later.