chore: setup hugging face spaces deployment and fix cors

feat(infrastructure): implement RBAC auth, CI/CD pipeline, and test suite