add CPU serving mode: SCAMSHIELD_GPU/DEVICE/THREADS/SHAP_EVALS switchable, metered GPU opt-in

fix zerogpu quota: drop duration holds, cache results, cpu bulk scan, bound shap evals

scamshield slim - code only, weights via model repo