Add analysis-only Docker image and reproducibility CI

[rickyjreyes]

Summary

• adds an analysis dependency manifest and CPU Docker image
• runs the committed waveform through a reduced deterministic smoke analysis
• validates core summary fields from the generated artifact
• keeps generated CI outputs outside the repository checkout
• excludes live oscilloscope access from CI and container expectations

The image defaults to a moderate 100-shuffle CPU run; pull-request CI uses a faster no-null scan.