Migrate ops/dev helpers into scripts/

Context

Today the Makefile reaches into the running container for one-off tasks (pull model, run tests, exec scripts). That logic lives inline in the Makefile and only works through docker. Moving it into standalone scripts lets the same logic run inside or outside a container and keeps the Makefile thin.

Goal

scripts/
  pull-model.sh       # guarded ollama pull (skip if model already present)
  reset-db.sh         # delete fireform.db and re-init
  seed-templates.py   # load example template(s) into a fresh DB
  smoke.sh            # curl the API endpoints, fail on any non-2xx

Tasks

• pull-model.sh: pull the extraction model into ollama, skip if it already exists (no redundant downloads). Honor an OLLAMA_MODEL override.
• reset-db.sh: remove fireform.db and re-run init.
• seed-templates.py: load example template JSON into a fresh DB.
• smoke.sh: hit the key endpoints, exit non-zero on failure.
• Make scripts runnable both standalone and from within docker where relevant.

Part of #512