Re-enable XSRF off (needed for HF Spaces iframe websocket)

Drop --server.enableCORS=false / enableXsrfProtection=false (was breaking iframe embed)

Add app.py

Add Dockerfile

Add README.md

Add requirements.txt

initial commit