Feature-flagged via DEPLOYMENT_MODE env var and /api/health endpoint. Disabled by default (self-hosted), enabled when deploymentMode=huggingface.
UPLOAD_DIR and DB_PATH were read directly from os.environ, bypassing the Settings dataclass. This caused an inconsistency where overriding Settings had no effect on these values. Now all modules import from infra.settings.settings.