Simplify OAuth: server-side cookies + iframe detection

Migrate to client-side OAuth via @huggingface/hub

Comprehensive frontend/backend overhaul: unified tool system, responsive UI, code quality

logs have a button to see, improved rejection/approved flow, trying to handle tqdm