Security hardening: XSS prevention, input validation, rate limiting

Add agent URL hyperlinks, replay downloads, and submit_with_replay endpoint

Add upload form, API endpoint, 5 difficulty tiers, real game data

Move Try experience to OpenRA-RL Space, remove Try tab from Bench

Rename Evaluate tab to Try, stream LLM agent gameplay

Add in-browser evaluation via Evaluate tab

Connect evaluation harness to HF-hosted OpenRA-RL environment

Move HF Space sync to openra-rl org

Add OpenRA-Bench leaderboard, evaluation harness, and rubrics