Production hardening: JWT blacklist, TOTP, Pydantic schemas, Prometheus, SSRF fix, CSP, Redis auth, Celery backup — 35 items across P0-P5

Fix chat session init crash and improve embed reliability

Restructure project for HF Spaces deployment