Allow public root/health while keeping API auth protected

Fix bool env whitespace parsing and ignore venv dirs

Move project files to repository root for Hugging Face Space