feat: configurable k8s resources, CSIC training pipeline, unified Dockerfile

- Make K8s namespace, TLS secret, and config ConfigMap names configurable
  via [kubernetes] config section (previously hardcoded to "ingress")
- Add CSIC 2010 dataset converter and auto-download for scanner training
- Unify Dockerfile for local and production builds (remove cross-compile path)
- Bake ML models directory into container image
- Update CSIC dataset URL to self-hosted mirror (src.sunbeam.pt)
- Fix rate_limit pipeline log missing fields
- Consolidate docs/README.md into root README.md

Signed-off-by: Sienna Meridian Satterwhite <sienna@sunbeam.pt>

src/ssh.rs

@@ -11,12 +11,12 @@ pub async fn run_tcp_proxy(listen: &str, backend: &str) {
     let ipv6_addr = if listen.starts_with('[') {
         listen.to_string()
     } else {
-        format!("[::]:{}", listen.split(':').last().unwrap_or("22"))
+        format!("[::]:{}", listen.split(':').next_back().unwrap_or("22"))
     };
     
     let ipv4_addr = if listen.contains(':') {
         // Extract port from the original address
-        let port = listen.split(':').last().unwrap_or("22");
+        let port = listen.split(':').next_back().unwrap_or("22");
         format!("0.0.0.0:{}", port)
     } else {
         "0.0.0.0:22".to_string()