Hardcode HF Space backend URL — no env var needed

Fix: use Railway PORT env var for next start

Upgrade Next.js to 14.2.35 to fix CVE-2025-55184 and CVE-2025-67779

Connect frontend to HF Space backend via NEXT_PUBLIC_BACKEND_URL env var

MVP2: quickAI — AI Copilot for E-Commerce