Add HuggingFace Hub direct scanning support

[dguido]

Summary

• Adds --huggingface REPO_ID argument to scan models directly from HuggingFace Hub
• Adds --hf-revision and --hf-token for revision specification and private repos
• Adds huggingface optional dependency: pip install fickling[huggingface]
• Automatically filters for pickle-based files (.bin, .pt, .pth, .pkl, .pickle)
• Skips known-safe formats (safetensors, json, txt, etc.)

Usage

# Scan a public model
fickling --huggingface bert-base-uncased --print-results

# Scan specific revision
fickling --huggingface bert-base-uncased --hf-revision main --print-results

# Scan private repo
fickling --huggingface my-org/private-model --hf-token $HF_TOKEN --print-results

Test plan

• All existing tests pass
• Linters pass
• Manual testing with public HuggingFace models

🤖 Generated with Claude Code