fix: chown /app to user in Dockerfile to allow mkdir models

fix: switch to non-root user before running model download script

Initial commit for Hugging Face Spaces deployment