feat(models): bake inswapper_128.onnx into image via explicit COPY and include file via LFS

Dockerfile

@@ -101,6 +101,8 @@ RUN python -c "import insightface; print('InsightFace installed successfully')"
 COPY --chown=user:user api_server.py /app/
 COPY --chown=user:user firebase_app_check.py /app/
 COPY --chown=user:user DeepFakeAI/ /app/DeepFakeAI/
+# Ensure inswapper_128.onnx is baked into the image if present in repo
+COPY --chown=user:user DeepFakeAI/.assets/models/inswapper_128.onnx /app/DeepFakeAI/.assets/models/inswapper_128.onnx
 
 # Create upload directories with proper permissions before switching to user
 RUN mkdir -p /app/uploads/source_images /app/uploads/target_videos /app/uploads/result_videos && \
@@ -111,12 +113,17 @@ RUN mkdir -p /app/.assets/models && chown -R user:user /app/.assets
 
 # Optional preload of InsightFace inswapper_128.onnx (skips if no URL provided)
 ARG INSWAPPER_URL=""
+ARG INSWAPPER_TOKEN=""
 ENV INSIGHTFACE_HOME="/home/user/.insightface"
 ENV INSWAPPER_PATH="/app/DeepFakeAI/.assets/models/inswapper_128.onnx"
 RUN set -e; mkdir -p /app/DeepFakeAI/.assets/models /home/user/.insightface/models; \
     if [ -n "$INSWAPPER_URL" ]; then \
       echo "Downloading inswapper_128.onnx from $INSWAPPER_URL"; \
-      curl -fsSL "$INSWAPPER_URL" -o "$INSWAPPER_PATH" || echo "Warning: download failed, continuing without preloaded model"; \
+      if [ -n "$INSWAPPER_TOKEN" ]; then \
+        curl -fsSL -H "Authorization: Bearer $INSWAPPER_TOKEN" "$INSWAPPER_URL" -o "$INSWAPPER_PATH" || echo "Warning: tokenized download failed, continuing without preloaded model"; \
+      else \
+        curl -fsSL "$INSWAPPER_URL" -o "$INSWAPPER_PATH" || echo "Warning: download failed, continuing without preloaded model"; \
+      fi; \
     else \
       echo "No INSWAPPER_URL provided; skipping model download"; \
     fi; \