feat(upload): support TAR and TGZ archives

feat: Add editable IRCA local band annotations

feat: Support workflow payloads and preview downloads

Load .env settings and expand local CORS regex

feat: Serve frontend static files from backend

add backend code