SpotipyFree wraps SpotAPI which uses tls_client to impersonate Chrome's TLS fingerprint and hits Spotify's internal endpoints. This is exactly what TzurSoffer's spotdl fork uses. Removes the complex GQL hash extraction (which couldn't find hashes in lazy-loaded webpack chunks). curl_cffi + TOTP kept as fallback. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>