P0 security: async backup, widget CORS, Redis auth.

Restructure project for HF Spaces deployment