Fix Hugging Face Space metadata color

Add Hugging Face and Supabase deployment setup

Fix: route authorization bypass with segment-based matching and Blazor layout security

add: Timelog table, BudgetedHours, estimated hours