bind: MLflow port to 127.0.0.1:5000:5000 in docker-compose.yml

Changes:
- Updated docker-compose.yml MLflow service port binding from 5000:5000 to 127.0.0.1:5000:5000
  to restrict access to localhost only for security
- Marked task 1.7 as complete in tasks.md

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

openspec/changes/code-review-fix/specs/error-boundary/spec.md

@@ -0,0 +1,23 @@
+## ADDED Requirements
+
+### Requirement: React Error Boundary component
+The application SHALL include a React Error Boundary component that catches JavaScript errors in its child component tree and renders a fallback UI instead of crashing to a white screen. The fallback SHALL display: an error message, a "Reload" button that calls `window.location.reload()`, and a "Try Again" button that resets the error boundary state.
+
+#### Scenario: Child component throws during render
+- **WHEN** CandleChart or any child component throws an error during rendering
+- **THEN** the Error Boundary catches the error and renders the fallback UI instead of a white screen
+
+#### Scenario: Fallback UI interaction
+- **WHEN** the user sees the error fallback and clicks "Try Again"
+- **THEN** the Error Boundary resets its state and attempts to re-render the child component tree
+
+#### Scenario: Error logging
+- **WHEN** the Error Boundary catches an error
+- **THEN** the error and component stack are logged via `console.error`
+
+### Requirement: Error Boundary placement in layout
+The root layout (`src/app/layout.tsx`) SHALL wrap `{children}` with the Error Boundary component so that any render error in any page is caught.
+
+#### Scenario: Layout wraps children
+- **WHEN** the application renders any page
+- **THEN** the page content is wrapped inside an Error Boundary