feat: switch auth from password to token mode (persists in browser)

Token auth stores the credential in localStorage so user only needs
to enter it once. Password auth requires re-entry on every page refresh.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

openclaw.json

@@ -3,7 +3,7 @@
     "mode": "local",
     "bind": "lan",
     "port": 7860,
-    "auth": { "password": "__OPENCLAW_PASSWORD__" },
+    "auth": { "token": "__OPENCLAW_PASSWORD__" },
     "trustedProxies": [
       "0.0.0.0/0"
     ],

scripts/sync_hf.py

@@ -346,8 +346,8 @@ class OpenClawFullSync:
                     cfg = json.load(f)
                 # Replace token placeholder
                 if "gateway" in cfg and "auth" in cfg["gateway"]:
-                    if cfg["gateway"]["auth"].get("password") == "__OPENCLAW_PASSWORD__":
-                        cfg["gateway"]["auth"]["password"] = OPENCLAW_PASSWORD
+                    if cfg["gateway"]["auth"].get("token") == "__OPENCLAW_PASSWORD__":
+                        cfg["gateway"]["auth"]["token"] = OPENCLAW_PASSWORD
                 if OPENAI_API_KEY and "models" in cfg and "providers" in cfg["models"] and "openai" in cfg["models"]["providers"]:
                     cfg["models"]["providers"]["openai"]["apiKey"] = OPENAI_API_KEY
                     if OPENAI_BASE_URL:
@@ -420,7 +420,7 @@ class OpenClawFullSync:
             # Force full gateway config for HF Spaces
             if not OPENCLAW_PASSWORD:
                 print("[SYNC] WARNING: OPENCLAW_PASSWORD not set! Gateway will have no auth.")
-            auth = {"password": OPENCLAW_PASSWORD} if OPENCLAW_PASSWORD else {}
+            auth = {"token": OPENCLAW_PASSWORD} if OPENCLAW_PASSWORD else {}
             # Dynamic allowedOrigins from SPACE_HOST (auto-set by HF runtime)
             allowed_origins = [
                 "https://huggingface.co",
@@ -441,7 +441,7 @@ class OpenClawFullSync:
                     "allowedOrigins": allowed_origins
                 }
             }
-            print(f"[SYNC] Set gateway config (auth={'password' if OPENCLAW_PASSWORD else 'none'}, origins={len(allowed_origins)})")
+            print(f"[SYNC] Set gateway config (auth={'token' if OPENCLAW_PASSWORD else 'none'}, origins={len(allowed_origins)})")
 
             # Ensure agents defaults
             data.setdefault("agents", {}).setdefault("defaults", {}).setdefault("model", {})