fix(sw.js): bump CACHE version to force clients off the poisoned cache

fix(BUG-28,NEW-A5): fix SW hostname check to use endsWith('.hf.space'); add all API paths to network-first list; bump cache to v5

Potential fix for pull request finding 'CodeQL / Incomplete URL substring sanitization'

fix(frontend): SW-01+L-01 -- fix SW cache paths for GitHub Pages

fix(BUG-12/23): sw.js never caches API responses — static-only cache-first, API always network

fix: loading screen — remove invalid ` and ${ from app.js, bump SW cache

feat(deploy):complete — zero cold-start deployment