feat(security): enforce IP quotas, harden claims, and tighten API limits

feat: Firebase web config + bake FIREBASE_PROJECT_ID into Space Dockerfile

feat: update backend, UI, and pipeline features

feat: serve Flutter web from FastAPI; multi-stage Dockerfile builds web in CI

fix: google-genai dep + OCR noise filter; add Dockerfile for HF deploy