build: Update dependencies and pre-commit hooks

Bump mypy to 2.3.1 and refresh all pre-commit hooks (ruff 0.16,
markdownlint 0.18). Fix issues surfaced by the new tooling:

- Use lowercase samesite cookie values (mypy 2.x)
- Remove no-op global declarations and address new ruff findings;
  ignore rules that would require behavior changes
- Add missing comma in AI system prompt (strings were concatenated)
- Wrap long README lines for MD013

README.md

@@ -64,17 +64,20 @@ To fetch the `token` and `club_id` using mobile-login:
 myice mobile-login
 ```
 
-This will output the necessary information that you can add to your `myice.ini` file.
+This will output the necessary information that you can add to your
+`myice.ini` file.
 
 ## web interface
 
-The tool includes a web interface that can be accessed by running the web API server:
+The tool includes a web interface that can be accessed by running the web
+API server:
 
 ```shell
 uv run fastapi run myice/webapi.py
 ```
 
-Then open your browser at `http://localhost:8000`. The web interface allows you to:
+Then open your browser at `http://localhost:8000`. The web interface allows
+you to:
 
 - Select between different configured accounts
 - View upcoming games and practices
@@ -88,16 +91,19 @@ The web interface supports two authentication methods:
    Infomaniak" button to authenticate using Infomaniak's OIDC provider. Only
    users in the allowed list will be granted access.
 
-1. **Static API Key**: For development purposes, you can still use `abc` as the token.
+1. **Static API Key**: For development purposes, you can still use `abc` as
+   the token.
 
 ### Environment Variables
 
 To configure OIDC authentication, set the following environment variables:
 
-- `CLIENT_ID`: Your OIDC client ID (default: 8ea04fbb-4237-4b1d-a895-0b3575a3af3f)
+- `CLIENT_ID`: Your OIDC client ID
+  (default: 8ea04fbb-4237-4b1d-a895-0b3575a3af3f)
 - `CLIENT_SECRET`: Your OIDC client secret
 - `REDIRECT_URI`: The redirect URI (default: `http://localhost:8000/callback`)
-- `ALLOWED_USERS`: Comma-separated list of allowed email addresses (e.g., `"user1@example.com,user2@example.com"`)
+- `ALLOWED_USERS`: Comma-separated list of allowed email addresses
+  (e.g., `"user1@example.com,user2@example.com"`)
 
 The web API provides the following endpoints: