fix: background upload to avoid HF proxy timeout on large OCR PDFs

feat: add JWT auth, per-user document isolation, and delete endpoint

Initial commit: Production-Grade RAG with Hybrid Search, Re-ranking and React UI