Update API URLs to point to Hugging Face Backend and support HF_TOKEN

.gitignore

@@ -6,3 +6,5 @@ static/uploads/*
 venv/
 .vscode/
 .DS_Store
+
+*.ps1

config.py

@@ -6,7 +6,7 @@ load_dotenv(override=True)
 
 class Config:
     SECRET_KEY = os.getenv("FLASK_SECRET_KEY", "fallback-dev-key")
-    BACKEND_API_URL = os.getenv("BACKEND_API_URL", "https://ain-el-aql-backend-production.up.railway.app")
+    BACKEND_API_URL = os.getenv("BACKEND_API_URL", "https://pant0x-ain-el-aql-backend.hf.space")
     ESP_GATE_URL = os.getenv("ESP_GATE_URL", "http://192.168.1.100/open")
     PLATE_COOLDOWN_SECONDS = int(os.getenv("PLATE_COOLDOWN_SECONDS", "3"))
     CAMERA_SOURCE = os.getenv("CAMERA_SOURCE", "0")

services/api_service.py

@@ -19,13 +19,20 @@ def _base_url() -> str:
         from flask import current_app
         return current_app.config["BACKEND_API_URL"].rstrip("/")
     except:
-        return os.getenv("BACKEND_API_URL", "https://ain-el-aql-backend-production.up.railway.app").rstrip("/")
+        return os.getenv("BACKEND_API_URL", "https://pant0x-ain-el-aql-backend.hf.space").rstrip("/")
 
 
 def _headers(token: str | None = None) -> dict:
     h = {"Accept": "application/json"}
+    hf_token = os.getenv("HF_TOKEN")
+    
     if token:
+        # User session token
         h["Authorization"] = f"Bearer {token}"
+    elif hf_token:
+        # Fallback to HF space token for public endpoints (like OCR inference)
+        h["Authorization"] = f"Bearer {hf_token}"
+        
     return h