chore(deps): bump the python group across 1 directory with 9 updates

Updates the requirements on [rapidocr](https://github.com/RapidAI/RapidOCR), [onnxruntime](https://github.com/microsoft/onnxruntime), [markitdown](https://github.com/microsoft/markitdown), [httpcore](https://github.com/encode/httpcore), [pydantic](https://github.com/pydantic/pydantic), [pydantic-settings](https://github.com/pydantic/pydantic-settings), [grpcio](https://github.com/grpc/grpc), [mcp](https://github.com/modelcontextprotocol/python-sdk) and [playwright](https://github.com/microsoft/playwright-python) to permit the latest version.

Updates `rapidocr` from 3.9.2 to 3.10.0
- [Release notes](https://github.com/RapidAI/RapidOCR/releases)
- [Commits](https://github.com/RapidAI/RapidOCR/compare/v3.9.2...v3.10.0)

Updates `onnxruntime` to 1.31.1
- [Release notes](https://github.com/microsoft/onnxruntime/releases)
- [Changelog](https://github.com/microsoft/onnxruntime/blob/main/docs/ReleaseNotesWorkflow.md)
- [Commits](https://github.com/microsoft/onnxruntime/compare/v1.20.0...v1.31.1)

Updates `markitdown` from 0.1.6 to 0.1.9
- [Release notes](https://github.com/microsoft/markitdown/releases)
- [Commits](https://github.com/microsoft/markitdown/compare/v0.1.6...v0.1.9)

Updates `httpcore` to 1.0.9
- [Release notes](https://github.com/encode/httpcore/releases)
- [Changelog](https://github.com/encode/httpcore/blob/master/CHANGELOG.md)
- [Commits](https://github.com/encode/httpcore/compare/1.0.0...1.0.9)

Updates `pydantic` to 2.14.2
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/v2.14.2/HISTORY.md)
- [Commits](https://github.com/pydantic/pydantic/compare/v2.13.4...v2.14.2)

Updates `pydantic-settings` to 2.16.2
- [Release notes](https://github.com/pydantic/pydantic-settings/releases)
- [Commits](https://github.com/pydantic/pydantic-settings/compare/v2.14.1...v2.16.2)

Updates `grpcio` to 1.85.1
- [Release notes](https://github.com/grpc/grpc/releases)
- [Commits](https://github.com/grpc/grpc/compare/v1.84.1...v1.85.1)

Updates `mcp` to 2.3.0
- [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md)
- [Commits](https://github.com/modelcontextprotocol/python-sdk/compare/v0.2.0...v2.3.0)

Updates `playwright` from 1.62.0 to 1.64.1
- [Release notes](https://github.com/microsoft/playwright-python/releases)
- [Commits](https://github.com/microsoft/playwright-python/compare/v1.62.0...v1.64.1)

---
updated-dependencies:
- dependency-name: rapidocr
  dependency-version: 3.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: onnxruntime
  dependency-version: 1.31.1
  dependency-type: direct:production
  dependency-group: python
- dependency-name: markitdown
  dependency-version: 0.1.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: httpcore
  dependency-version: 1.0.9
  dependency-type: direct:production
  dependency-group: python
- dependency-name: pydantic
  dependency-version: 2.14.2
  dependency-type: direct:production
  dependency-group: python
- dependency-name: pydantic-settings
  dependency-version: 2.16.2
  dependency-type: direct:production
  dependency-group: python
- dependency-name: grpcio
  dependency-version: 1.85.1
  dependency-type: direct:production
  dependency-group: python
- dependency-name: mcp
  dependency-version: 2.3.0
  dependency-type: direct:production
  dependency-group: python
- dependency-name: playwright
  dependency-version: 1.64.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python
...

Signed-off-by: dependabot[bot] <support@github.com>

requirements-dev.txt

@@ -2,4 +2,4 @@
 -r requirements.txt
 # psutil lets `-n auto` use physical cores instead of logical CPU threads.
 pytest-xdist[psutil]>=3.8,<4
-playwright==1.62.0
+playwright==1.64.1

requirements-optional.txt

@@ -1,7 +1,7 @@
 # Optional dependencies — install only if you use the corresponding feature.
 # Local OCR for screenshots, scans, labels, and coordinate-grounded text extraction.
-rapidocr==3.9.2
+rapidocr==3.10.0
-onnxruntime>=1.20,<2
+onnxruntime>=1.31.1,<2
 # The app handles their absence gracefully (clear error message on first use).
 #
 # Note: chromadb-client + fastembed moved to requirements.txt — RAG, semantic
@@ -46,7 +46,7 @@ PyMuPDF
 # magika (onnxruntime), already a core dep via fastembed. We avoid the
 # [all]/Azure/audio extras (cloud + heavy). Pinned to a release >30 days old per
 # the dependency-age discussion in issue #485.
-markitdown[docx,pptx,xlsx,xls]==0.1.6
+markitdown[docx,pptx,xlsx,xls]==0.1.9
 
 # Photoshop PSD opening / flattened previews / layer inspection.
 psd-tools

requirements.txt

@@ -5,9 +5,9 @@ python-dotenv
 httpx
 # HTTPS clients using certifi must distrust the compromised eMudhra CA paths.
 certifi>=2026.10.23
-httpcore>=1.0,<2.0
+httpcore>=1.0.9,<2.0
-pydantic>=2.13.4
+pydantic>=2.14.2
-pydantic-settings>=2.14.1
+pydantic-settings>=2.16.2
 SQLAlchemy
 pypdf
 pypdfium2
@@ -25,7 +25,7 @@ numpy
 # ChromaDB service); fastembed runs local ONNX embeddings.
 chromadb-client
 # gRPC vendors independent roots; 1.84.1 removes the incident trust anchors.
-grpcio>=1.84.1
+grpcio>=1.85.1
 fastembed>=0.9.1
 youtube-transcript-api
 yt-dlp
@@ -51,7 +51,7 @@ bcrypt
 # Built-in servers use the v1 low-level Server decorator API. MCP SDK v2 is a
 # breaking rewrite, so keep fresh installs on the maintained v1 line until the
 # servers are migrated together.
-mcp<2
+mcp<3
 pyotp
 qrcode[pil]
 croniter

static/index.html

@@ -2472,7 +2472,7 @@
               </div>
 
               <div class="admin-toggle-sub" style="margin-top:4px;">
-                Off (YOLO) turns off the tool approval gate (same control as the
+                Auto-approve turns off the tool approval gate (same control as the
                 ODYSSEUS_TOOL_APPROVAL_GATE env var). Bash, host_shell, send_email and
                 delete_email then run without a confirmation even after the agent has
                 seen untrusted external content (email, web pages, documents), so a