fix streaming: async generator keeps httpx client alive internally

use shell form CMD

fix Dockerfile user for HF Spaces

simplify Dockerfile, use python3.11

add forwarded-allow-ips

deploy to HF Spaces: add Dockerfile, remove dashboard