sync from GitHub 6e39eaf: feat: 添加 latin1_safe_header 函数，确保 HTTP header 值的安全性，避免编码错误

sync from GitHub 8c7a6c8: feat: Enhance user backup and file management with session limits and token revocation

sync from GitHub 68bdec0: security: harden CORS, SSRF, brute-force, log injection and info leakage

sync from GitHub 1727379: feat: 备份分段上传，解决 2.6MB+ 大备份 OOM 崩溃

sync from GitHub dc52e4f: fix: 修复文件上传999报错与Web管理手机端适配

deploy: initial release to Hugging Face Spaces