Fix HF iframe embed and production auth over proxy

Harden backend/frontend and clean repo artifacts

fix: resolve all UPGRADED_DEEP_REPO_AUDIT critical issues

feat: async backend refactor + upgraded deep repo audit

updated to work with openrouter

configured backend