chore(lint): auto-fix 253 of 283 ruff issues (F401, I001, E402, RUF100, UP037, SIM105)

Mass ruff auto-fix:
  - ruff check --fix: 109 issues fixed (F401 unused imports,
    I001 unsorted imports, UP037 quoted annotations, SIM105
    suppressible exception, RUF100 unused-noqa)
  - ruff check --fix --unsafe-fixes: 22 additional issues
  - ruff format: 70 files reformatted
  - Manual pass: fix 16 misplaced import httpx lines
  - Manual pass: fix remaining E402 (import-after-docstring)

Result: 283 errors -> 30 errors.

The remaining 30 are real issues that need manual review:
  5 F401 unused-import (likely auto-generated stubs)
  5 F821 undefined-name (real bugs in code that references
    redis/pydantic/LLMRegistry without imports)
  3 BLE001 (the compliance LLM fallback is intentional; the
    other two are real)
  3 RUF012 mutable-class-default
  3 SIM105, 3 SIM117, 2 E722, 2 E741
  1 B007, 1 B025, 1 E402, 1 RUF200 (pyproject.toml issue)

Tests: 436/437 pass (1 pre-existing SSE sandbox failure).
format check + import sort: now clean.
make ci: still gated on the 30 remaining real issues.
Follow-up: triage the 30 issues file-by-file.

secrets_backend.py

@@ -23,6 +23,7 @@ The gopass lookup path is `pry/<name>`. If you pass a name with leading
 Part of Pry - https://git.rugmunch.io/RugMunchMedia/pryscraper
 Licensed under MIT. See LICENSE.
 """
+
 # SPDX-License-Identifier: MIT
 # Copyright (c) 2026 Rug Munch Media LLC
 #
@@ -60,7 +61,9 @@ def _detect_backend() -> str:
     """Resolve which backend to use right now, based on env + availability."""
     requested = os.getenv("PRY_SECRET_BACKEND", _DEFAULT_BACKEND).lower()
     if requested not in VALID_BACKENDS:
-        logger.warning("invalid_secret_backend", extra={"value": requested, "fallback": BACKEND_AUTO})
+        logger.warning(
+            "invalid_secret_backend", extra={"value": requested, "fallback": BACKEND_AUTO}
+        )
         return BACKEND_AUTO
     if requested == BACKEND_AUTO:
         return BACKEND_GOPASS if _gopass_available() else BACKEND_ENV
@@ -163,7 +166,7 @@ def _get_from_file(name: str) -> str | None:
     """Read a secret from the .env file."""
     values = _read_env_file()
     for key in (name, name.upper(), f"PRY_{name.upper()}", f"PRY_{name}"):
-        if key in values and values[key]:
+        if values.get(key):
             return values[key]
     return None
 
@@ -205,7 +208,9 @@ def set_secret(name: str, value: str) -> bool:
     Returns True on success, False on failure.
     """
     if not _gopass_available():
-        logger.warning("set_secret_skipped", extra={"reason": "gopass not available", "secret_name": name})
+        logger.warning(
+            "set_secret_skipped", extra={"reason": "gopass not available", "secret_name": name}
+        )
         return False
     bin_path = shutil.which("gopass")
     path = _normalize_name(name)