fix: address critical and medium post-audit findings

fix: address post-audit review findings across docs and source

ci(hooks): add pre-commit config with ruff and mypy hooks

fix(config): move logging setup from module-level to explicit init

fix(models): remove duplicate validation in DifficultySettings

fix(ml): add input shape validation before model prediction

fix(logging): replace f-string logging with lazy %s formatting

refactor(ml): decouple Streamlit caching from model module

refactor(database): decouple Streamlit caching from connection module

refactor(pages): extract shared configure_page, remove finally:pass

refactor(validation): remove SQL injection guards (no SQL database exists)

refactor(dead-code): remove unused PlayerStats Pydantic model

refactor(dead-code): remove unused get_player_by_full_name and safe_styled_text

refactor(dead-code): remove unused GameState and 4 dead functions from session.py

fix: restore player search functionality and add HF frontmatter

fix: resolve linting errors and update ruff config

Optimize away team generation and persist in session state to prevent loops

Prepare for Hugging Face Spaces deployment: add metadata and fix model path

Address reviewer feedback: fix grammar, path resolution, and sampling logic

Transition data layer to local CSV using pandas

Fix CI failures: type annotations, linting, and coverage threshold

test fixes

Refactor app with security fixes, error handling, and type safety