add stats dashboard at GET / and restrict deploy-hf triggers

aefeb84