fix: robust backup — retry on HF 500, SQLite WAL checkpoint, fix tar deprecation

feat: auto-generate and persist AUTH_JWT_SECRET — sessions survive restarts

feat: restructure to HuggingClaw architecture with dashboard + Cloudflare features