feat: update README and HACKING, lock deps via pip-compile in DockerHEADmaster

Use pip-compile --generate-hashes in the Docker build stage so that
the runtime stage installs pinned dependencies with verified integrity,
ensuring fully reproducible container builds.

- Add Docker section to README
- Fix Python badge (3.7+ → 3.11+) and outdated docs links
- Upgrade pip, setuptools, and wheel in Dockerfile to fix grype findings

1 files changed, 3 insertions, 0 deletions

diff --git a/.gitignore b/.gitignore
index 01be4a6..d4045de 100644
--- a/.gitignore
+++ b/.gitignore
@@ -148,6 +148,9 @@ banned_addresses.txt
 *.b2sum
 
 # -----------------------------------------------------------------------------
+# Binaries
+_bin/
+
 # Temporary / Backup Files
 # -----------------------------------------------------------------------------
 *.log