Add API key input to UI and run pipeline in thread to avoid deadlock

Phase 4: Add HuggingFace Spaces deployment (Groq fallback, static UI, /run_pipeline endpoint, Dockerfile non-root user)