Add Hugging Face OAuth support, add auth tab to settings

crates/goose-cli/src/cli.rs

@@ -1939,11 +1939,16 @@ async fn handle_local_models_command(command: LocalModelsCommand) -> Result<()>
 
             // Download
             let manager = goose::download_manager::get_download_manager();
+            let hf_token = goose::providers::huggingface_auth::resolve_token_async()
+                .await
+                .ok()
+                .flatten();
             manager
-                .download_model_sharded(
+                .download_model_sharded_with_bearer_token(
                     format!("{}-model", model_id),
                     download_files,
                     file.size_bytes + mmproj_size_bytes,
+                    hf_token,
                     None,
                 )
                 .await?;

crates/goose-server/src/openapi.rs

@@ -396,6 +396,8 @@ derive_utoipa!(IconTheme as IconThemeSchema);
         super::routes::config_management::remove_extension,
         super::routes::config_management::get_extensions,
         super::routes::config_management::read_all_config,
+        super::routes::config_management::list_provider_secrets,
+        super::routes::config_management::delete_provider_secret,
         super::routes::config_management::providers,
         super::routes::config_management::get_provider_models,
         super::routes::config_management::get_provider_model_info,
@@ -488,6 +490,10 @@ derive_utoipa!(IconTheme as IconThemeSchema);
         super::routes::config_management::ConfigResponse,
         super::routes::config_management::ProvidersResponse,
         super::routes::config_management::ProviderDetails,
+        super::routes::config_management::ProviderSecretsResponse,
+        super::routes::config_management::ProviderSecret,
+        super::routes::config_management::ProviderSecretStorage,
+        super::routes::config_management::ProviderSecretStatus,
         super::routes::config_management::SlashCommandsResponse,
         super::routes::config_management::SlashCommand,
         super::routes::config_management::CommandType,