fix: Prevent /api/stats from crashing with opaque 500 on schema drift

fix: SafeRow wrapper prevents corpus_source IndexError permanently

fix: Restore missing Flask app initialization

fix: Add dynamic SQLite column detection

feat: Pure security architecture with GA4 and HF Dataset Secrets