build(deps): bump @huggingface/hub from 2.8.1 to 2.9.0 (#4203)

Bumps [@huggingface/hub](https://github.com/huggingface/huggingface.js) from 2.8.1 to 2.9.0.
- [Release notes](https://github.com/huggingface/huggingface.js/releases)
- [Commits](https://github.com/huggingface/huggingface.js/commits)

---
updated-dependencies:
- dependency-name: "@huggingface/hub"
  dependency-version: 2.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

packages/backend/package.json

@@ -113,7 +113,7 @@
     "@ai-sdk/mcp": "^1.0.19",
     "@ai-sdk/openai-compatible": "^2.0.28",
     "@huggingface/gguf": "^0.3.3",
-    "@huggingface/hub": "^2.8.1",
+    "@huggingface/hub": "^2.9.0",
     "ai": "^6.0.78",
     "express": "^5.2.1",
     "express-openapi-validator": "^5.6.2",