Create user 1000 with writable HOME for HF Spaces git config

Add wget to Dockerfile (required by HF Spaces dev tools)

Fix port binding: start.sh kills zombie, add app logging

Fix port binding: simplify startup, remove timeout on segments, clean SIGTERM

Security hardening: rate limiting, no creds in URLs, path traversal fix

Add HuggingFace Spaces deployment support