feat: replace Aider with secure mini-SWE-agent worker

Dockerfile

@@ -2,17 +2,18 @@ FROM python:3.12-slim
 
 RUN apt-get update \
     && apt-get install -y --no-install-recommends \
-        composer git nodejs npm openssh-client php-cli php-curl php-mbstring php-mysql php-xml php-zip unzip \
+        composer git nodejs npm php-cli php-curl php-mbstring php-mysql php-xml php-zip unzip \
     && rm -rf /var/lib/apt/lists/*
 
 WORKDIR /app
 COPY pyproject.toml README.md ./
 COPY src ./src
-RUN pip install --no-cache-dir ".[agent]"
+RUN --mount=type=cache,target=/root/.cache/pip \
+    pip install --retries 10 --timeout 120 .
 
 RUN useradd --create-home --uid 10001 coder \
-    && mkdir -p /workspaces \
-    && chmod 700 /home/coder
+    && install -d -m 0755 /workspaces \
+    && chmod 0700 /home/coder
 
 ENTRYPOINT ["lai-agent"]
 CMD ["worker"]