v3.7.1 — bump audiolla v1.0.1 → v1.0.3

Patch release that picks up two upstream fixes for the HF auth/offline
defaults that affected every text-to-audio engine in v1.0.1:

- v1.0.2 flipped HF_HUB_OFFLINE default to 0 so the engines can
  lazy-download weights on first request.
- v1.0.3 made HUGGINGFACE_TOKEN and HF_TOKEN interchangeable so gated
  repos work regardless of which env name the operator picked.

The compose env block reverts to just `HUGGINGFACE_TOKEN: ${HF_TOKEN:-}`
— the two HF_* override blocks added during v3.7.0 smoke-testing are
deleted, since they're now redundant with upstream defaults.

All three generation engines verified end-to-end on the live aigate
stack: audioldm2, musicgen-small, stable-audio-open.

See CHANGELOG.md for the full details.