fix(pii): bump transformers to 5.5.0 for LightGlue RCE advisory

transformers <5.5.0 is vulnerable to arbitrary code execution during
model initialization in the LightGlue loading path (Dependabot alerts
#174/#175). huggingface_hub moves 1.3.0 -> 1.23.0 because transformers
5.5.0 requires huggingface-hub>=1.5.0.

Verified the full pin set (torch 2.11.0, gliner 0.2.27, presidio
2.2.362, spacy 3.8.14) resolves with pip; gliner 0.2.27 allows
transformers <5.7.0 and any hub >=0.21.4.

Author: waleedlatif1

apps/pii/requirements-gliner.txt

@@ -6,5 +6,5 @@
 # torch is pinned in the Dockerfile instead: the CPU and CUDA targets install
 # the same version from different wheel indexes.
 gliner==0.2.27
-transformers==5.3.0
-huggingface_hub==1.3.0
+transformers==5.5.0
+huggingface_hub==1.23.0