fix: open CORS + bump to v5

fix: add CORS middleware for Vercel frontend

fix: lazy load model + bump to v3

initial commit: deepfake detection CNN + RAG pipeline