hf_xet

This release introduces secure Keyless CI/CD authentication via OIDC and enhances the CLI by supporting `hf://` URIs for uploads and downloads. It also exposes job container ports through the public jobs proxy and migrates Xet functionality to a new session-based API.

This release introduces major security and usability enhancements, including Keyless CI/CD authentication via OIDC and support for unified `hf://` URIs in CLI upload/download commands. It also exposes job container ports through the public proxy.