refactored: to utilise the google adk and production grade agent

Dockerfile

@@ -1 +1,51 @@
-# TODO: generation subagent fills this in.
+FROM python:3.12-slim AS builder
+
+WORKDIR /app
+
+# Install build dependencies
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    curl \
+    ca-certificates \
+    && rm -rf /var/lib/apt/lists/*
+
+# Copy dependency specifications and install wheels
+COPY requirements.txt ./
+RUN pip install --no-cache-dir --prefix=/install -r requirements.txt
+
+# Final production image stage
+FROM python:3.12-slim
+
+ENV PYTHONUNBUFFERED=1 \
+    PYTHONDONTWRITEBYTECODE=1 \
+    PYTHONPATH=/app \
+    PORT=8080
+
+WORKDIR /app
+
+# Create non-root application user for container security
+RUN groupadd -g 10001 appgroup && \
+    useradd -u 10001 -g appgroup -s /bin/sh -m appuser
+
+# Copy installed dependencies from builder
+COPY --from=builder /install /usr/local
+
+# Copy application source, skills, and configuration
+COPY app/ ./app/
+COPY eval/ ./eval/
+COPY docs/ ./docs/
+COPY deliverables/ ./deliverables/
+COPY terraform/ ./terraform/
+COPY workflow.yaml ./
+COPY requirements.yaml ./
+
+RUN chown -R appuser:appgroup /app
+
+USER appuser
+
+EXPOSE 8080
+
+HEALTHCHECK --interval=30s --timeout=5s --start-period=5s --retries=3 \
+  CMD python -c "import urllib.request; urllib.request.urlopen('http://localhost:8080/health')" || exit 1
+
+CMD ["python", "-m", "app.agent", "--host", "0.0.0.0", "--port", "8080"]
+