should let user configure pull secret for model in private/permissioned repo like huggingface

[bjwswang]

Like bge-reranking models , it requires user to accept its privacy policy before access it.
That means if you want to pull that model from hugginface , you must provide HF_TOKEN(Token comes from a hf account which accepts the policy)