Fix: move model downloads to runtime to access HF_TOKEN

Deployment fix: clean backend only