fix(settings): name the gate-off option in its row copy

The Tool approval row copy opened with "Auto-approve turns off..." beside
an option now labelled Off (YOLO). Start the sentence with the option's
own name. Follow-up to #6304; no behaviour change.

requirements-dev.txt

@@ -2,4 +2,4 @@
 -r requirements.txt
 # psutil lets `-n auto` use physical cores instead of logical CPU threads.
 pytest-xdist[psutil]>=3.8,<4
-playwright==1.64.1
+playwright==1.62.0

requirements-optional.txt

@@ -1,7 +1,7 @@
 # Optional dependencies — install only if you use the corresponding feature.
 # Local OCR for screenshots, scans, labels, and coordinate-grounded text extraction.
-rapidocr==3.10.0
+rapidocr==3.9.2
-onnxruntime>=1.31.1,<2
+onnxruntime>=1.20,<2
 # The app handles their absence gracefully (clear error message on first use).
 #
 # Note: chromadb-client + fastembed moved to requirements.txt — RAG, semantic
@@ -46,7 +46,7 @@ PyMuPDF
 # magika (onnxruntime), already a core dep via fastembed. We avoid the
 # [all]/Azure/audio extras (cloud + heavy). Pinned to a release >30 days old per
 # the dependency-age discussion in issue #485.
-markitdown[docx,pptx,xlsx,xls]==0.1.9
+markitdown[docx,pptx,xlsx,xls]==0.1.6
 
 # Photoshop PSD opening / flattened previews / layer inspection.
 psd-tools

requirements.txt

@@ -5,9 +5,9 @@ python-dotenv
 httpx
 # HTTPS clients using certifi must distrust the compromised eMudhra CA paths.
 certifi>=2026.10.23
-httpcore>=1.0.9,<2.0
+httpcore>=1.0,<2.0
-pydantic>=2.14.2
+pydantic>=2.13.4
-pydantic-settings>=2.16.2
+pydantic-settings>=2.14.1
 SQLAlchemy
 pypdf
 pypdfium2
@@ -25,7 +25,7 @@ numpy
 # ChromaDB service); fastembed runs local ONNX embeddings.
 chromadb-client
 # gRPC vendors independent roots; 1.84.1 removes the incident trust anchors.
-grpcio>=1.85.1
+grpcio>=1.84.1
 fastembed>=0.9.1
 youtube-transcript-api
 yt-dlp
@@ -51,7 +51,7 @@ bcrypt
 # Built-in servers use the v1 low-level Server decorator API. MCP SDK v2 is a
 # breaking rewrite, so keep fresh installs on the maintained v1 line until the
 # servers are migrated together.
-mcp<3
+mcp<2
 pyotp
 qrcode[pil]
 croniter

static/index.html

@@ -2472,7 +2472,7 @@
               </div>
 
               <div class="admin-toggle-sub" style="margin-top:4px;">
-                Auto-approve turns off the tool approval gate (same control as the
+                Off (YOLO) turns off the tool approval gate (same control as the
                 ODYSSEUS_TOOL_APPROVAL_GATE env var). Bash, host_shell, send_email and
                 delete_email then run without a confirmation even after the agent has
                 seen untrusted external content (email, web pages, documents), so a