Align Space runtime with local start-plan login

Fix entrypoint executable permission

Add credential bootstrap entrypoint

Inject encrypted runtime credentials from Space secret

Include runtime system prompt asset

Deploy minimal Docker Space

initial commit