Revert to standard demo.launch — middleware path broke static assets and theme_css init

Use App.create_app directly so static assets aren't shadowed by FastAPI mount

FastAPI middleware: rewrite Gradio login HTML to prefill username='guest'

gr.Blocks(head=…) wraps ChatInterface; selector now anchors on type=password

Fix: set demo.head as attribute (ChatInterface init doesn't accept head=)

Revert to Gradio standard auth + JS prefill of username field

Custom login page (password only) via FastAPI middleware

Drop 'demo' from user-facing copy (auth message + README)

Auth: password-only (username ignored), updated message

Fail closed: refuse to launch without AUTH_* secrets

Restore requirements.txt + .gitignore (lost in earlier visibility flip)

Read auth creds from Space secrets (rotated; old hardcoded creds invalidated)

Add Gradio basic auth (guest / vintage1930)

Drop /data cache redirect; bucket detached, re-download on cold-start is faster

initial commit