chore(deps): bump CtrlRegen backend deps and pin huggingface_hub (#62, #64, #65)

Bump accelerate to 1.14.0, controlnet-aux to 0.0.10, and safetensors to
0.8.0 in requirements-ctrlregen.txt. Verified end-to-end against the pinned
noai-watermark commit b642ae45 (import + CUDA inference) and via Docker build.

Pin huggingface_hub to 0.24.0: 0.26.0+ removed the cached_download symbol
that diffusers 0.27.2 still imports, so unpinned installs resolve 0.36.2 and
the backend fails to import. Refresh the Dockerfile.ctrlregen base-image
comment to drop the now-stale safetensors 0.4.3 mention.

service/Dockerfile.ctrlregen

@@ -19,9 +19,9 @@
 ARG NOAI_WATERMARK_REF=b642ae45d20eded52c96d570985eb4e3e427aac8
 
 # python:3.11-slim (multi-arch manifest digest). The pinned ML deps below are
-# 2023-era research pins (safetensors 0.4.3, transformers 4.37.2 ->
-# tokenizers<0.19) that ship no Python 3.14 wheels; 3.11 is the newest base
-# with prebuilt wheels for all of them.
+# research-era pins (diffusers 0.27.2 / transformers 4.37.2 -> tokenizers<0.19)
+# that ship no Python 3.14 wheels; 3.11 is the newest base with prebuilt wheels
+# for all of them.
 FROM python:3.11-slim@sha256:a630a63cdb314e2d138a2fca3e375e319e8568346ffafac5b980f888630ac4f1
 
 ARG NOAI_WATERMARK_REF

service/scripts/requirements-ctrlregen.txt

@@ -10,9 +10,13 @@
 # noai-watermark commit before bumping.
 diffusers==0.27.2
 transformers==4.37.2
-accelerate==0.27.2
-controlnet-aux==0.0.9
+accelerate==1.14.0
+controlnet-aux==0.0.10
 color-matcher==0.6.0
-safetensors==0.4.3
+safetensors==0.8.0
+# huggingface_hub must stay <=0.25.0: 0.26.0+ removed the cached_download
+# symbol that diffusers 0.27.2 still imports. Unpinned, pip resolves latest
+# (0.36.2) and the backend fails to import.
+huggingface_hub==0.24.0
 Pillow==12.3.0
 piexif==1.1.3