Add startup Hub access check (whoami + model_info)

Logs which account the HF token maps to and whether it can read MODEL_ID,
so private-repo 404s are diagnosable directly from the Space logs.

app.py

@@ -97,6 +97,45 @@ IMAGE_GUARD_MODEL_ID = os.getenv("IMAGE_GUARD_MODEL_ID", DEFAULT_IMAGE_GUARD_MOD
 IMAGE_GUARD_THRESHOLD = float(
     os.getenv("IMAGE_GUARD_THRESHOLD", str(DEFAULT_IMAGE_GUARD_THRESHOLD))
 )
+
+
+def _log_hub_access() -> None:
+    """Log which account the token maps to and whether it can see MODEL_ID."""
+    if not HF_TOKEN:
+        return
+    try:
+        from huggingface_hub import HfApi, whoami
+
+        try:
+            me = whoami(token=HF_TOKEN)
+            orgs = [o.get("name") for o in me.get("orgs", [])]
+            print(
+                f"HF token belongs to '{me.get('name')}' (orgs: {orgs or 'none'}).",
+                flush=True,
+            )
+        except Exception as exc:  # noqa: BLE001
+            print(f"WARNING: token whoami failed: {exc}", flush=True)
+            return
+
+        try:
+            info = HfApi().model_info(MODEL_ID, token=HF_TOKEN)
+            print(
+                f"Access OK: '{MODEL_ID}' is reachable (private={info.private}).",
+                flush=True,
+            )
+        except Exception as exc:  # noqa: BLE001
+            print(
+                f"ERROR: token cannot access '{MODEL_ID}': "
+                f"{type(exc).__name__}. The token's owner must have read access to "
+                "this private repo (a 'pull access' scope is not enough if the "
+                "account/org lacks access).",
+                flush=True,
+            )
+    except Exception as exc:  # noqa: BLE001
+        print(f"WARNING: hub access check skipped: {exc}", flush=True)
+
+
+_log_hub_access()
 IMAGE_GUARD_OFFLOAD_T2I = os.getenv("IMAGE_GUARD_OFFLOAD_T2I", "0") == "1"
 # Opt-out: guard runs by default; set ENABLE_IMAGE_GUARD=0 or uncheck the UI box to disable.
 DEFAULT_ENABLE_IMAGE_GUARD = os.getenv("ENABLE_IMAGE_GUARD", "1") == "1"