fix: prevent proxy from stripping API prefixes

fix: stop frontend loop with ML fallback and add status code logging to proxy

fix: use localhost and add proxy logging (omitted pathRewrite per actual backend routes)

feat: move proxy logic to physical proxy.cjs for better visibility