`hf_token` can only be passed as a CLI argument

Even though there are indications in the code that suggest that it can be provided via an env variable, i'm failing to see where that would happen.

Such secrets should never be passed as argv, it immediately leaks them in process list. Probably most secure is to read them from a file, but reading from an env variable is an improvement...