better secret handling

app.py

@@ -27,7 +27,7 @@ def assign_samples(csv_path):
 def load_existing_annotations():
     """Load the existing annotations from the HF dataset."""
     try:
-        file_path = hf_hub_download(HF_REPO, CSV_FILENAME, repo_type="dataset")
+        file_path = hf_hub_download(HF_REPO, CSV_FILENAME, repo_type="dataset", token=st.secrets["HF_TOKEN"])
         return pd.read_csv(file_path)
     except Exception:
         return pd.DataFrame(columns=["username", "id"])  # Return empty DataFrame if not found
@@ -72,8 +72,8 @@ if dataset.empty:
 def push_to_hf_hub(csv_path):
     api = HfApi()
     try:
-        api.create_repo(HF_REPO, repo_type="dataset", exist_ok=True)
-        api.upload_file(path_or_fileobj=csv_path, path_in_repo=CSV_FILENAME, repo_id=HF_REPO, repo_type="dataset")
+        api.create_repo(HF_REPO, repo_type="dataset", exist_ok=True, token=st.secrets["HF_TOKEN"])
+        api.upload_file(path_or_fileobj=csv_path, path_in_repo=CSV_FILENAME, repo_id=HF_REPO, repo_type="dataset", token=st.secrets["HF_TOKEN"])
         print(f"Dataset updated: https://huggingface.co/datasets/{HF_REPO}")
     except Exception as e:
         print(f"Error pushing to HF: {e}")