fix: build issues

Dockerfile

@@ -2,6 +2,12 @@
 
 FROM python:3.10-slim
 
+# ── HF_TOKEN — must be declared immediately after FROM ──────────
+# ARG before any RUN step so HF Spaces build secrets are available.
+ARG HF_TOKEN=""
+ENV HF_TOKEN=${HF_TOKEN}
+
+
 WORKDIR /app
 
 # ── System deps ───────────────────────────────────────────────────
@@ -19,12 +25,6 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
         curl \
     && rm -rf /var/lib/apt/lists/*
 
-# ── HF_TOKEN build arg ────────────────────────────────────────────
-# Add HF_TOKEN to HF Space -> Settings -> Repository Secrets.
-# HF Spaces passes Repository Secrets as Docker build ARGs automatically.
-ARG HF_TOKEN=""
-ENV HF_TOKEN=${HF_TOKEN}
-
 # ── Python deps ───────────────────────────────────────────────────
 COPY requirements.txt .
 RUN pip install --no-cache-dir --compile -r requirements.txt