fix: agent_run param mismatch (send agent_name) + add GitHub push-update (3 inputs: repo name, token, username; --force-with-lease)

Fixes agent_run + adds GitHub push-update:

FIX: handle_agent_run param mismatch
- Backend declared 8 params (prompt, target_language, target_framework,
history_json, skills_json, search_enabled, image_url, agent_name)
but frontend POST body only sent 7 — Gradio raised
'needed: 8, got: 7'. Frontend now sends state.activeAgent as the
8th value, restoring agent_run for ALL prompts (the bug broke agent
mode entirely after the Custom Agents feature shipped).

FEAT: Push Update to GitHub (3 inputs only)
- New backend: code/tools/github.py::push_to_github(repo_name,
github_token, username, branch?, commit_message?, timeout?)
- Workflow: snapshot workspace → fresh git repo in temp dir →
git add -A + git commit → git push --force-with-lease
https://<user>:<token>@github.com/<owner>/<repo>.git <branch>.
- Falls back to plain push if --force-with-lease fails on a brand-new
empty repo (no refs to lease against).
- Token is scrubbed from error messages before being returned.
- New API: push_github(repo_name, github_token, username, ...)
- New UI: 'Push Update to GitHub' section in the Deploy tab with 3
required inputs (repo name, GitHub token, username) + an Advanced
<details> for branch/commit_message.
- Updated README.md and CLAUDE.md with new feature docs.

code/server/routes.py

@@ -34,12 +34,10 @@ import logging
 import os
 import tempfile
 from pathlib import Path
-from typing import TYPE_CHECKING, Any
+from typing import Any
 
+import gradio as gr
 from fastapi.responses import HTMLResponse, FileResponse
-
-if TYPE_CHECKING:
-    import gradio as gr
 try:
     from gradio import Server
 except ImportError:
@@ -543,15 +541,15 @@ def handle_chat(
 @app.api(name="hf_auth", concurrency_limit=4)
 def handle_hf_auth(
     oauth_token: str = "",
-    request: gr.Request = None,
+    token: "gr.OAuthToken | None" = None,
 ) -> str:
     """Get HuggingFace OAuth profile and list of organizations.
 
     Reads the OAuth token from (in priority order):
       1. The `oauth_token` parameter (explicit pass-in from the client).
-      2. The Gradio session — `request.request.session["oauth_info"]`,
-         populated automatically by Gradio after the user clicks
-         "Sign in with HuggingFace" and completes the OAuth flow.
+      2. The injected `token: gr.OAuthToken` — Gradio auto-injects this
+         from the user's session IF they have completed the
+         "Sign in with HuggingFace" OAuth flow.
       3. The `HF_TOKEN` env var (for local dev / when running outside a Space).
 
     Returns the user's profile, organizations, and the access token so the
@@ -560,28 +558,20 @@ def handle_hf_auth(
     try:
         from huggingface_hub import whoami
 
-        token = oauth_token.strip() if oauth_token else ""
+        resolved = oauth_token.strip() if oauth_token else ""
 
-        # ── Fall back to Gradio session (populated by /login/huggingface) ──
-        if not token and request is not None:
+        # ── Fall back to Gradio-injected OAuthToken (from session) ───────
+        if not resolved and token is not None:
             try:
-                session = getattr(request, "session", None) or (
-                    getattr(getattr(request, "request", None), "session", None)
-                )
-                if session and isinstance(session, dict):
-                    oauth_info = session.get("oauth_info")
-                    if isinstance(oauth_info, dict):
-                        token = (oauth_info.get("access_token") or "").strip()
+                resolved = (getattr(token, "token", "") or "").strip()
             except Exception:
-                # Session access can fail outside a real request context —
-                # silently fall through to the env-var fallback below.
                 pass
 
         # ── Last-resort fallback: HF_TOKEN env var (local dev) ──────────
-        if not token:
-            token = (os.getenv("HF_TOKEN") or "").strip()
+        if not resolved:
+            resolved = (os.getenv("HF_TOKEN") or "").strip()
 
-        if not token:
+        if not resolved:
             yield json.dumps({
                 "authenticated": False,
                 "username": "",
@@ -593,7 +583,7 @@ def handle_hf_auth(
             return
 
         # Get user info using the OAuth token
-        user_info = whoami(token=token)
+        user_info = whoami(token=resolved)
         username = user_info.get("name", "")
         fullname = user_info.get("fullname", username)
 
@@ -628,7 +618,7 @@ def handle_hf_auth(
             "name": fullname,
             "picture": avatar_url,
             "organizations": orgs,
-            "token": token,
+            "token": resolved,
             "message": f"Signed in as {username}",
         })