chore: vendor @joan/procedural-glyph-engine for portable builds

Move @joan/procedural-glyph-engine from absolute path dep
(/private/tmp/orby-pkg) to vendored local dep (web/vendor/) so the
SPA builds in Docker and on other machines without the temp dir.

- Vendor Orby v5.0.0 into web/vendor/
- Switch package.json dep to file:../vendor
- Update Dockerfile to COPY vendor into build context
- Use npm install instead of npm ci (file: deps need install)
- Fix missing trailing newline in Dockerfile

web/vendor/package.json

@@ -0,0 +1,106 @@
+{
+  "name": "@joan/procedural-glyph-engine",
+  "version": "5.0.0",
+  "description": "Orby — A procedural glyph engine by Joan Sterjo.",
+  "author": "Joan Sterjo",
+  "homepage": "https://joansterjo-celonis.github.io/Procedural-glyph-engine/",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/joansterjo-celonis/Procedural-glyph-engine.git"
+  },
+  "bugs": {
+    "url": "https://github.com/joansterjo-celonis/Procedural-glyph-engine/issues"
+  },
+  "type": "module",
+  "types": "./types/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./types/index.d.ts",
+      "import": "./src/joan-engine.js",
+      "default": "./src/joan-engine.js"
+    },
+    "./config": {
+      "types": "./types/config.d.ts",
+      "import": "./src/config.js",
+      "default": "./src/config.js"
+    },
+    "./fields": {
+      "types": "./types/fields.d.ts",
+      "import": "./src/fields.js",
+      "default": "./src/fields.js"
+    },
+    "./glyphs": {
+      "types": "./types/glyphs.d.ts",
+      "import": "./src/glyphs.js",
+      "default": "./src/glyphs.js"
+    },
+    "./sprites": {
+      "types": "./types/sprites.d.ts",
+      "import": "./src/sprites.js",
+      "default": "./src/sprites.js"
+    },
+    "./state-director": {
+      "types": "./types/state-director.d.ts",
+      "import": "./src/state-director.js",
+      "default": "./src/state-director.js"
+    },
+    "./state-sequence": {
+      "types": "./types/state-sequence.d.ts",
+      "import": "./src/state-sequence.js",
+      "default": "./src/state-sequence.js"
+    },
+    "./web-component": {
+      "types": "./types/web-component.d.ts",
+      "import": "./src/web-component.js",
+      "default": "./src/web-component.js"
+    },
+    "./web-component/register": {
+      "types": "./types/web-component-register.d.ts",
+      "import": "./src/web-component-register.js",
+      "default": "./src/web-component-register.js"
+    },
+    "./styles.css": "./src/styles.css",
+    "./package.json": "./package.json"
+  },
+  "sideEffects": [
+    "./src/web-component.js",
+    "./src/web-component-register.js",
+    "./src/styles.css"
+  ],
+  "files": [
+    "src",
+    "types",
+    "docs",
+    "examples",
+    "README.md",
+    "LICENSE",
+    "NOTICE",
+    "dist/manifest.json",
+    "dist/joan-engine-v5.standalone.html"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "dev": "node scripts/dev.mjs",
+    "build": "node scripts/build.mjs",
+    "test": "node --test",
+    "verify:download": "node scripts/verify-download.mjs",
+    "check": "npm run test && npm run build && npm run verify:download",
+    "prepack": "npm run check"
+  },
+  "keywords": [
+    "orby",
+    "canvas",
+    "glyph",
+    "pixel",
+    "procedural-animation",
+    "ai-status",
+    "sprite",
+    "dither"
+  ],
+  "license": "SEE LICENSE IN LICENSE",
+  "engines": {
+    "node": ">=18"
+  }
+}