Merge origin/main: keep local app.py (superset of HF web-upload changes)

fix: Prevent /api/stats from crashing with opaque 500 on schema drift

Upload app.py

fix: SafeRow wrapper prevents corpus_source IndexError permanently

fix: Restore missing Flask app initialization

fix: Add dynamic SQLite column detection

feat: Pure security architecture with GA4 and HF Dataset Secrets