Harden POET checkpoint loading

Update POET model loading to use `torch.serialization.safe_globals([argparse.Namespace])` and `weights_only=True` when calling `torch.load`. This reduces unsafe pickle deserialization risk while still allowing legacy checkpoint metadata needed by the model state load.

Author: C-Achard

dlclivegui/services/inference/models/poet/poet_processor.py

@@ -2,6 +2,7 @@
 
 from __future__ import annotations
 
+import argparse
 import importlib
 import logging
 from pathlib import Path
@@ -182,11 +183,13 @@ def _build_model(
             aux_loss=False,
         )
 
-        checkpoint = torch.load(
-            self._checkpoint_path,
-            map_location="cpu",
-            weights_only=False,
-        )
+        with torch.serialization.safe_globals([argparse.Namespace]):
+            checkpoint = torch.load(
+                self._checkpoint_path,
+                map_location="cpu",
+                # weights_only=False,
+                weights_only=True,
+            )
         model.load_state_dict(
             checkpoint["model"],
             strict=True,