fix(ci): use HEAD:main for HF sync, quote URL, handle missing token

ci: add HF Spaces sync workflow for Talent-Lens

chore(infra): add gitignore, gitattributes, CI, and repo governance