Ship hardening wave: off-loop CSV inference, model_ids cap/dedupe, real detector Hub ids, comment fixes

fix: key rate-limit buckets on X-Forwarded-For behind Spaces ingress

feat: single-image Hugging Face Spaces deployment with rate limiting