build: lean onefile spec with icon.ico

- Set EXE icon to icon.ico
- Exclude unused heavy modules (matplotlib/scipy/PIL/Qt/tests/etc.)
- optimize=1 (drop asserts, keep docstrings; optimize=2 crashes numpy)

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
