remove public prefix, add server only

[zachkrall]

• move fetching hume access token to a server-only file. this will trigger a compiler error if it's ever called from a client only context
• removes NEXT_PUBLIC_ prefix for sensitive Hume AI values
• removes unnecessary next.config.js file
• moves files out of src directory