Fix Gradio 6 launch() crash: drop show_api, pin versions

app.py

@@ -296,5 +296,5 @@ if __name__ == "__main__":
         server_port=int(os.environ.get("PORT", "7860")),
         auth=AUTH,
         auth_message="Sign in to use CanLex.",
-        show_api=False,
+        ssr_mode=False,   # no Node in the slim container; render client-side
     )

requirements.txt

@@ -1,5 +1,7 @@
-# CanLex Web (Path B) -- thin-client dependencies.
-gradio>=5.0      # web UI with built-in username/password auth
-mcp>=1.9         # streamable-HTTP client for the CanLex MCP server
+# CanLex Web (Path B) -- thin-client dependencies. Versions are pinned so the
+# Hugging Face Docker build is reproducible (an unpinned gradio floated to a new
+# major and broke a launch() argument).
+gradio==6.14.0   # web UI with built-in username/password auth
+mcp==1.27.1      # streamable-HTTP client for the CanLex MCP server
 # Google Gemini is called through its REST API using only the Python standard
 # library (urllib); no LLM SDK dependency is needed.