Full ATOM backend sync from D:/Annator/ATOM/atom/backend + HF slim runtime

CSP fix: explicit script-src unsafe-eval + allow HF iframe (backend/middleware/security.py)

Full stack ATOM backend + AIMONEYFLOW clients (port 7860) (part 5)