Allow public root/health while keeping API auth protected

Move project files to repository root for Hugging Face Space