fix: update Dockerfile for HF Spaces (port 7860, non-root user)

Add Fly.io deployment configuration