Allow public root/health while keeping API auth protected

Fix Python 3.12 compatibility for Space deployment

Move project files to repository root for Hugging Face Space