fix: serve frontend static files and use relative /upload route

feat: upload security hardening + frontend rebuild

fix: correct dist folder structure

fix: use relative URL for API calls

fix: replace opencv with headless version to fix mediapipe conflict

fix: add missing system libs for mediapipe and opencv

feat: add face landmarker model via git lfs

feat: initial deployment setup

initial commit