fix(docker): remove explicit starlette pin

conflicts with fastapi==0.115.0 fastapi==0.115.0 bundles starlette==0.46.x as a direct dependency. Pinning starlette>=0.40.0 separately causes pip ResolutionImpossible. fastapi 0.115.0 already satisfies the starlette security requirement (>= 0.40.0 for CVE-2024-47874) through its own bundled dependency.

Dockerfile

@@ -9,14 +9,13 @@ COPY . .
 
 RUN pip install --no-cache-dir --upgrade pip && \
     pip install --no-cache-dir \
-    fastapi==0.115.0 \
+    "fastapi==0.115.0" \
     "uvicorn[standard]==0.27.0" \
     pydantic==2.5.3 \
     pydantic-settings==2.1.0 \
     python-dotenv==1.0.0 \
     python-magic==0.4.27 \
     python-multipart==0.0.22 \
-    "starlette>=0.40.0" \
     Pillow==12.1.1 \
     imagehash==4.3.1 \
     "numpy>=1.24.0,<2.0.0" \
@@ -28,15 +27,15 @@ RUN pip install --no-cache-dir --upgrade pip && \
     scikit-image==0.22.0 \
     cryptography==46.0.6 \
     psutil==5.9.8 \
-    xgboost>=2.0.0 \
-    shap>=0.45.0 && \
+    "xgboost>=2.0.0" \
+    "shap>=0.45.0" && \
     pip install --no-cache-dir \
     torch==2.6.0 \
     torchvision==0.21.0 \
     transformers==4.53.1 \
     diffusers==0.25.0 \
     accelerate==1.7.0 \
-    huggingface_hub==0.30.0 \
+    "huggingface_hub==0.30.0" \
     safetensors==0.4.5 \
     ftfy==6.1.1 \
     regex==2023.12.25 \