fix: use idiomatic Express 5 optional wildcard syntax for SPA catch-all

fix: use regex literal for SPA catch-all to bypass path-to-regexp v8 strictness

fix: use named wildcard parameter for Express 5 catch-all

fix: update SPA catch-all route for Express 5 compatibility

feat: add HF Space Docker deployment with live data API

add bfl, etc

init