fix(oauth): use iFlow code-display page as OAuth redirect URI

feat(oauth): add iFlow cookie auth flow and strengthen qwen token handling

feat(hf): add backup/restore controls and harden OAuth edge cases

feat(hf): add dashboard HF controls and align runtime with Spaces port defaults

Add OmniRoute codebase without binary assets