fix: reduce memory usage from unbounded state and eager imports

[27Bslash6]

Summary

Running this server in k8s, it was OOMing every ~3 hours at a 2Gi memory limit — with zero papers downloaded. Root causes:

• pymupdf4llm + fitz (~150-200MB of C extensions) imported eagerly at module level even when the server only handles search queries
• arxiv.Client() created fresh on every single request (new HTTP session/connection pool each time, never closed)
• conversion_statuses dict grows without bound — entries added on every download, never removed
• PDF files never cleaned up after conversion (line 80 had a comment saying "Clean up PDF" but did nothing)
• ResearchContext.explored_papers / paper_analyses dicts grow without bound
• PaperManager class in resources/papers.py is never imported by server.py but pulls in pymupdf4llm and arxiv at module level
• black>=25.1.0 is in runtime dependencies instead of dev optional-dependencies

Changes

1. Lazy-import pymupdf4llm and fitz — moved inside convert_pdf_to_markdown(), the only function that uses them. Server startup no longer loads ~200MB of C extensions.
2. Shared arxiv.Client() singleton — get_arxiv_client() in config.py, reused by download/search/list_papers instead of creating one per request.
3. Bounded conversion_statuses — entries removed in finally block after conversion completes (success or error).
4. PDF cleanup — pdf_path.unlink(missing_ok=True) after successful conversion + gc.collect() to nudge C-level allocator.
5. Capped ResearchContext — both dicts capped at 50 entries (FIFO eviction).
6. Removed dead PaperManager — resources/papers.py gutted (the class was never wired into server.py).
7. Moved black to dev deps — was pulling in black + its dependency tree at runtime for no reason.

Test plan

• All 32 existing tests pass
• Verified fitz and pymupdf4llm are NOT in sys.modules after importing server.py
• black --check passes on all files

[JiwaniZakir]

The eviction logic added in prompts/handlers.py is duplicated verbatim at two callsites (explored_papers and paper_analyses), which is worth extracting into a small helper like _evict_oldest(d, max_size) to avoid divergence if _MAX_CONTEXT_ENTRIES semantics ever need to change. Additionally, the cap strategy silently drops the oldest entry with no logging, making it hard to diagnose memory-pressure behavior in production — a single logger.debug line would go a long way.

The get_arxiv_client() singleton in config.py isn't safe under concurrent initialization: two coroutines could both observe _arxiv_client is None before either finishes constructing it, particularly if arxiv.Client() ever suspends or if the server runs tasks in a thread pool. Using a module-level threading.Lock or an asyncio.Lock (initialized at import time, not inside the function) would close this race.

The gutted resources/papers.py is now just a module-level docstring explaining that the class was removed. Keeping an empty file "for potential future use" is unnecessary noise — git history preserves the implementation if it's ever needed again, and the now-empty __init__.py export removal already signals the intent clearly.