fix: preload SQLite DB at startup — faster first request on HF Space

fix: allow *.hf.space CORS origin — fixes blank page on HF Space

fix: correct SQLite INSERT/RETURNING + trust proxy

fix: sql-asm.js pure JS + trust proxy

fix: bundle sql.js inline — no external deps

feat: SQLite+sql.js DB backend with HF Dataset sync — no external deps

fix: Express 5 wildcard route syntax + bcryptjs

fix: bundle bcryptjs (pure JS) — no native deps

feat: add pre-built server bundle