fix(api): allow unauthenticated GET to root path for HF Space health pings

feat: synchronize proxy with upstream commits up to 5305bd7 and integrate NIM key rotator

Allow unauthenticated GET to root path so HF Space UI ping doesn't return 401

Deploy latest upstream with key rotation, vision adapter, and HF configs

Deploy to Hugging Face Space