fix: upgrade hf-hub 0.3→0.4 to fix relative URL redirect bug

HuggingFace's API started returning relative URLs in 307 redirect Location headers,
which broke hf-hub 0.3.x. Version 0.4.x properly handles relative redirects.

Fixes #1

Author: moonstripe