fix: migrate huggingface-cli → hf (deprecated CLI breaks backup/restore)

feat: persist sqlite to hf dataset bucket across rebuilds

fix: add ca-certificates so git clone over HTTPS verifies certs

Update Dockerfile

Create Dockerfile