feat: inject HF_TOKEN from environment at startup

Dockerfile

@@ -1,6 +1,9 @@
 FROM nginx:alpine
 COPY . /usr/share/nginx/html
 COPY nginx.conf /etc/nginx/conf.d/default.conf
-RUN rm -f /usr/share/nginx/html/Dockerfile /usr/share/nginx/html/nginx.conf /usr/share/nginx/html/README.md
+COPY start.sh /start.sh
+RUN rm -f /usr/share/nginx/html/Dockerfile /usr/share/nginx/html/nginx.conf /usr/share/nginx/html/README.md /usr/share/nginx/html/start.sh /usr/share/nginx/html/.gitignore 2>/dev/null; \
+    rm -rf /usr/share/nginx/html/.git 2>/dev/null; \
+    chmod +x /start.sh
 EXPOSE 8080
-CMD ["nginx", "-g", "daemon off;"]
+CMD ["/start.sh"]

start.sh

@@ -0,0 +1,6 @@
+#!/bin/sh
+# Inject HF_TOKEN from environment into index.html for the SPA
+if [ -n "$HF_TOKEN" ]; then
+  sed -i "s|</head>|<script>window.__HF_TOKEN__ = '$HF_TOKEN';</script></head>|" /usr/share/nginx/html/index.html
+fi
+exec nginx -g "daemon off;"