Make HF storage repo private by default for security

modules/shared/services/hf_storage.py

@@ -60,14 +60,14 @@ class HFStorageClient:
         try:
             self.api = HfApi(token=self.token)
             
-            # Create repo if not exists
+            # Create repo if not exists (private for security)
             try:
                 create_repo(
                     repo_id=self.repo_id,
                     repo_type="dataset",
                     token=self.token,
                     exist_ok=True,
-                    private=False  # Public for easy access
+                    private=True  # Private repo - uses HF_TOKEN for access
                 )
                 logger.info(f"HF storage enabled: {self.repo_id}")
             except Exception as e: