feat: HF OAuth sign-in, probe endpoints restricted to Hugging Face org members

feat: persist state in mounted HF bucket and skip startup sweep when state is fresh

feat: AWS GPU capacity checker with ODCR probing