fix: make workdir writable for config/cookie generation at runtime

Configure for Hugging Face Space (Docker): port 7860, non-root user, secret-driven config via run.py

feat: full Google Native API support for Gemini CLI compatibility

feat(server): 添加 API 密钥认证和 Docker 部署支持