Update API URLs to point to Hugging Face Backend and support HF_TOKEN

services/api_service.py

@@ -26,13 +26,14 @@ def _headers(token: str | None = None) -> dict:
     h = {"Accept": "application/json"}
     hf_token = os.getenv("HF_TOKEN")
     
-    if token:
-        # User session token
-        h["Authorization"] = f"Bearer {token}"
-    elif hf_token:
-        # Fallback to HF space token for public endpoints (like OCR inference)
+    # Hugging Face needs this to let the request through the Private Space proxy
+    if hf_token:
         h["Authorization"] = f"Bearer {hf_token}"
         
+    # Backend will read the user session from this new header
+    if token:
+        h["X-Supabase-Auth"] = f"Bearer {token}"
+        
     return h