fix(auth): use absolute API_BASE URLs for auth and admin endpoints

fix(auth): add setToken() to api client so all requests send Bearer token

feat(llm): add generateReport() method to API client

feat: dynamic DiCE counterfactuals with 3-state clinical rendering

feat(api): add getSchema() method and install form dependencies

feat(core): apply production security updates, fix infrastructure bugs, and add SHAP service

feat(frontend): connect to live Hugging Face production API

feat(frontend): scaffold Vite React app with Tailwind CSS and API client