fix: use fastapi.responses.HTMLResponse instead of non-existent gr.HTMLResponse

fix: pin huggingface_hub==0.19.4 to resolve gradio ImportError

chore: add governance scaffold from Template-SIN-Agent (backfill Wave 2)

Initial commit