The Poetry-exported requirements.txt included --hash entries, which put pip
into --require-hashes mode. The HF Spaces builder appends its own packages
(gradio[oauth], uvicorn, websockets, spaces, fastapi) without hashes, so the
install failed with exit code 1 (BUILD_ERROR).

Strip all hashes while keeping the exact locked versions and environment
markers, so pip resolves normally on the Space's Python 3.10.