feat: US-002 - Adaugă hf_token la verificarea de secrete în credential_store

- REQUIRED_SECRETS include acum hf_token alături de discord_token
- teste actualizate pentru noul set de secrete obligatorii (+ test_partial_required)
- gates rulate: tests PASS (22 eșecuri preexistente neschimbate), /review (backend) PASS

tests/test_secrets.py

@@ -165,12 +165,18 @@ class TestListSecrets:
 class TestCheckSecrets:
     def test_missing_required(self, mock_keyring):
         result = check_secrets()
-        assert result == {"discord_token": False}
+        assert result == {"discord_token": False, "hf_token": False}
 
     def test_present_required(self, mock_keyring):
         set_secret("discord_token", "tok-123")
+        set_secret("hf_token", "hf-456")
         result = check_secrets()
-        assert result == {"discord_token": True}
+        assert result == {"discord_token": True, "hf_token": True}
+
+    def test_partial_required(self, mock_keyring):
+        set_secret("discord_token", "tok-123")
+        result = check_secrets()
+        assert result == {"discord_token": True, "hf_token": False}
 
 
 # ===========================================================================
@@ -250,6 +256,7 @@ class TestCLISecretsTest:
 
     def test_all_present(self, mock_keyring, capsys):
         set_secret("discord_token", "tok")
+        set_secret("hf_token", "hf-tok")
         with patch("sys.argv", ["echo", "secrets", "test"]):
             cli_main()
         out = capsys.readouterr().out