Dockerfile optimizer

This is a text review, not a build: the file is parsed line by line and graded against a named rule set, and the rewrite applies only the mechanical fixes (COPY instead of a local ADD, merging RUN lines) while the judgment calls are left as OPT comments for you to decide. It cannot run your image, verify a tag exists, or measure a real layer size, and BuildKit secrets and cache mounts are outside its rules. Everything stays in this tab.