fix: increase OCR timeout and configure Next.js dev origins

- Increased tesseract.js worker creation timeout from 8s → 20s (accounts for lazy loading and language model download on first run)
- Added allowedDevOrigins to next.config.mjs to permit localhost and .local hostnames
- Resolves OCR timeout on slow connections and first-time initialization

frontend/next.config.mjs

@@ -10,6 +10,11 @@ const withPWA = withPWAInit({
 /** @type {import('next').NextConfig} */
 const nextConfig = {
   output: "standalone",
+  allowedDevOrigins: [
+    "localhost",
+    "127.0.0.1",
+    "*.local",
+  ],
 };
 
 export default withPWA(nextConfig);