fix: Windows compatibility fixes

- Use %APPDATA%\DoctorFill for data/logs dirs on Windows frozen build
  to avoid write permission issues in Program Files
- Move Flask app import to module level in server.py for reliable
  PyInstaller entrypoint on Windows
- Fix CORS origins: replace unsupported wildcard port with explicit
  localhost URLs (8000, 1420)

Author: cutiips

server.py

@@ -19,6 +19,7 @@
     # Force debug off in bundled mode (prevents Flask reloader double-start)
     os.environ.setdefault('DEBUG', 'false')
 
+from src.web.app import main
+
 if __name__ == "__main__":
-    from src.web.app import main
     main()