Merge remote-tracking branch 'hf/main'

ui: improve fetch button color and settings CSV documentation

fix: pass session_id to telemetry so logged-in users are not reported as Anonymous

fix: show existing slides row when switching to Upload Files mode

fix: move session_id_input definition before first reference

fix: pass session_id to storage/slides functions on HF Spaces

fix: use gr.skip() to prevent reconnection events from clearing login state

fix: use session_id_input.change() instead of demo.load() for login state

fix: cache and replay page-load result on Gradio reconnection events

fix: prevent Gradio reconnection from overwriting logged-in state

debug: add visible diagnostics to on_page_load for session troubleshooting

fix: consolidate page-load into single demo.load() to avoid chaining issues

fix: chain demo.load events sequentially for reliable session propagation

fix: pass localStorage session ID to all user storage handlers

fix: use pure JS logout — clear localStorage and reload page

fix: move localStorage clear to .then() chain after logout handler

fix: simplify logout handler — no inputs, just clear localStorage side-effect

fix: use Gradio button for sign-out instead of navigation link

fix: use localStorage instead of cookies for session persistence

fix: handle Gradio Obj type in cookie lookup for session detection

fix: use lifespan handler + server-side session for OAuth on HF Spaces

fix: use Gradio built-in OAuth routes instead of custom ones

fix: use ASGI middleware for OAuth routes to prevent Gradio 404

feat: implement manual OAuth for HF Spaces Docker SDK

fix: clear LoginButton load event on HF Spaces to prevent self-reveal

fix: hide LoginButton on HF Spaces (sdk:docker) and hash usernames in telemetry

fix: stop using request.username on HF Spaces (returns Space owner, not visitor)

fix: hide LoginButton on initial load in HF Spaces to prevent flash

docs: add login & user storage section to in-app documentation

fix: use OAuthProfile for login state across all UI functions

fix: use login() instead of success() for LoginButton event handler

fix: hide existing slides selector when TCGA fetch mode is selected

fix: resolve column mismatch error in get_settings function

fix: use OAuthProfile instead of request.username for HF Spaces login

fix: handle AuthenticationMiddleware error when accessing request.username

fix: add diagnostic logging for HF Spaces user authentication

fix: use LoginButton instead of expects_oauth parameter

feat: enable HuggingFace OAuth for user tracking

fix: use Gradio 6.x built-in username instead of JWT parsing

fix: handle None values in telemetry long format reports

fix: pin setuptools <70.0.0 to preserve pkg_resources

fix: use cached_slide_count instead of from_cache boolean for accurate telemetry

feat: add cache-hit tracking to telemetry

Merge pull request #25 from pathology-data-mining/feature/hf-user-telemetry

Update src/mosaic/telemetry/utils.py

fix: address PR review feedback for HF user telemetry

perf: defer model loading until first cache miss

refactor: reduce log noise for expected HF 404 errors in cache download

fix: remove unreachable except PermissionError block in tcga.py

Apply suggestions from code review