fix: add retry logic for HF Space push (handles 429 rate limit)

fix: avoid exposing HF_TOKEN in git remote URL

ci: silence Node.js 20 deprecation warning + add workflow_dispatch

ci: add GitHub Actions workflow to sync main → HuggingFace Space