feat: add crawl4ai template

[phala-agent]

Summary

• Add a Phala Cloud prebuilt template for unclecode/crawl4ai.
• Use a CPU-safe HTTP smoke demo that installs/imports the real Crawl4AI==0.8.6 Python package and converts bundled HTML to Markdown without browser launches, model downloads, hosted-provider calls, or GPU.
• Add upstream favicon icon at templates/icons/crawl4ai.png.

Upstream

• Repository: https://github.com/unclecode/crawl4ai
• Author: unclecode
• Icon source: upstream docs/md_v2/img/favicon-32x32.png

Template files

• templates/prebuilt/crawl4ai/docker-compose.yml
• templates/prebuilt/crawl4ai/README.md
• templates/icons/crawl4ai.png
• templates/config.json

Config/env

• repo: https://github.com/Phala-Network/phala-cloud/tree/main/templates/prebuilt/crawl4ai
• Optional env: CRAWL4AI_VERSION (default 0.8.6)
• No required secrets or provider credentials for the default smoke path.

Validation

• python3 sdks/templates/validate.py ✅
• git -C sdks diff --check origin/main...HEAD ✅
• docker compose -f sdks/templates/prebuilt/crawl4ai/docker-compose.yml config >/dev/null ✅
• Static audit for README coverage, config ID uniqueness, icon presence, no host bind mounts, no env_file, no external build context, and no literal secrets ✅

Phala Cloud smoke

• Deploy command used profile hermes-admin-cvm-check, tdx.small, --wait, --no-public-logs, and --no-public-sysinfo.
• Deployment: auto-template-test-crawl4ai-0527-081053
• CVM: cvm_YKRanXea
• VM UUID: 726d4fb8-82fa-4c78-ab88-c181547b02a5
• App ID: 07b2e2680ea87163bb6d138378b541e256442721
• phala ps showed /dstack-app-1 running and healthy.
• HTTP smoke passed:
  • GET /healthz -> 200, import_ok=true, demo_ok=true, version 0.8.6
  • GET /demo -> 200, reports no browser/network/provider/model use
  • GET /v1/models -> 200, includes crawl4ai/local-markdown-demo

Cleanup

• Temporary smoke CVM deletion was requested with phala cvms delete --force.
• Follow-up lookup returned The requested CVM was not found, so cleanup is verified.

cc @Marvin-Cypher for review.

[phala-agent]

cc @Marvin-Cypher for review.

[Marvin-Cypher]

Reviewed template files, normalized tags, compose config, config validation, stale path cleanup, and compose safety scan. Checks are passing.