Use WEB_UI_TOKEN secret for authentication

Dockerfile

@@ -17,6 +17,6 @@ COPY sync_memory.py /app/sync_memory.py
 # Reset entrypoint to ensure we can run our shell command
 ENTRYPOINT []
 
-# Launch sync script in background, then start Moltbot Gateway
-# Use --bind lan to bind to 0.0.0.0 (required for Docker/HF Spaces)
-CMD ["/bin/sh", "-c", "python3 -u /app/sync_memory.py & node dist/index.js gateway --port 7860 --bind lan --allow-unconfigured"]
+# Launch sync script in background, export the gateway token from our secret, then start Moltbot
+# We export both possible variable names to ensure the gateway picks up the WEB_UI_TOKEN secret.
+CMD ["/bin/sh", "-c", "python3 -u /app/sync_memory.py & export OPENCLAW_GATEWAY_TOKEN=$WEB_UI_TOKEN; export CLAWDBOT_GATEWAY_TOKEN=$WEB_UI_TOKEN; node dist/index.js gateway --port 7860 --bind lan --allow-unconfigured"]