fix: revert to repo-level HF_TOKEN secret (drop environment binding)

fix: use HF_TOKEN environment + secrets.HF for deploy workflow

fix: sync LLM API secrets to HF Space on every deploy

feat: Supabase auth + Razorpay billing + fix API double-URL bug

fix: use correct HF username vxkyyy in deploy.yml auth URL

fix: deploy.yml target correct HF space vxkyyy/AgentIC

feat: add Docker + HuggingFace Spaces deployment pipeline

Tier-1 upgrade: fail-closed orchestration, CI, and benchmark export