Custom code in modeling_*.py auto-executed on trust_remote_code

Arbitrary Python in the modeling module exfiltrates HF_TOKEN environment variable on first import.

# Reproduction steps redacted under coordinated disclosure.
# Full PoC will be published with the advisory at embargo expiry.

$ zds reproduce ZDS-2025-0127