Pin CloudSpace layered gateway image

Pin GHCR image with single-container gateway lane separation, health/config endpoints, API guards, and HTTP META supervision.

Dockerfile

@@ -1,4 +1,4 @@
-FROM ghcr.io/zhizhishu/cloudspace@sha256:e2bcd55c9412acc9b661fdc8590c5d7d4a88322ac17b6c972ff384450d210b3f
+FROM ghcr.io/zhizhishu/cloudspace@sha256:350b5521b80dcedf46859f1571c06e3cc933f49d729d7bb592607518355c5102
 
 ENV PORT=7860 \
     ACCESS_LOCK_PORT=7860

README.md

@@ -14,7 +14,7 @@ CloudSpace is a private subscription workspace image for zhizhishu.
 This Hugging Face Space runs the published CloudSpace container image:
 
 ```text
-ghcr.io/zhizhishu/cloudspace@sha256:e2bcd55c9412acc9b661fdc8590c5d7d4a88322ac17b6c972ff384450d210b3f
+ghcr.io/zhizhishu/cloudspace@sha256:350b5521b80dcedf46859f1571c06e3cc933f49d729d7bb592607518355c5102
 ```
 
-This image includes the merged web UI/backend, HTTP META on the internal `127.0.0.1:9876` endpoint, Supabase state backup support, the CloudSpace access lock, subscription/API stall guards, and bounded cache cleanup.
+This image keeps a single container while separating gateway lanes for access lock, health/config, API, frontend, and internal HTTP META. It also includes Supabase state backup support, subscription/API stall guards, bounded cache cleanup, and HTTP META supervision.