Use access_route for IP detection in HF Spaces

- Add access_route fallback since HF Spaces doesn't pass X-Forwarded-For
- Remove debug-headers endpoint

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

app.py

@@ -123,6 +123,9 @@ def get_client_ip():
         return request.headers.get('X-Real-IP')
     elif request.headers.get('CF-Connecting-IP'):  # Cloudflare
         return request.headers.get('CF-Connecting-IP')
+    elif request.access_route:
+        # Use access_route for HF Spaces (falls back to proxy chain)
+        return request.access_route[0]
     else:
         return request.remote_addr
 
@@ -369,19 +372,6 @@ print(f"Loaded {len(all_harvard_sentences)} Korean prompts")
 # Initialize initial_sentences as empty - will be populated with unconsumed sentences only
 initial_sentences = []
 
-@app.route("/debug-headers")
-def debug_headers():
-    """Temporary endpoint to check request headers"""
-    headers_info = {
-        'X-Forwarded-For': request.headers.get('X-Forwarded-For'),
-        'X-Real-IP': request.headers.get('X-Real-IP'),
-        'CF-Connecting-IP': request.headers.get('CF-Connecting-IP'),
-        'remote_addr': request.remote_addr,
-        'access_route': list(request.access_route),
-        'get_client_ip()': get_client_ip(),
-    }
-    return jsonify(headers_info)
-
 @app.route("/")
 def arena():
     # Pass a subset of sentences for the random button fallback