fix: Dockerfile installs from requirements.txt — fixes diffusers CVE, adds pillow-heif (audit #17)

fix(docker): remove explicit starlette pin

security(deps): patch CVEs — Pillow, cryptography, transformers, tqdm, starlette

fix(api,deploy): correct AttributeError, missing lifespan, Dockerfile drift, XGBoost double-boost

fix: frontend bugs, security deps, cleanup unused files

Fix: update safetensors 0.4.1→0.4.5 and accelerate 0.25→1.7.0 for transformers 4.53 compat

Fix: update huggingface_hub 0.20.0 → 0.30.0 to satisfy transformers 4.53.0

fix: update all vulnerable dependencies (Dependabot alerts)

feat: Phase 4 — evidence_id in UI, fix 42 security vulnerabilities

Fix: restore HF Space README yaml header + fix startup timeout

Fix: use libgl1 instead of libgl1-mesa-glx (Debian trixie)

Fix: add libGL and libglib for opencv-python in Docker

Deploy: add Dockerfile for HuggingFace Spaces