- Fix bandit suppressions (use # nosec B608 for bandit) - Add # noqa: S608 for ruff compatibility - CI workflow: add coverage reporting (informational) - CI workflow: track mypy error baseline - CI workflow: improve documentation
- add concurrency control to cancel stale runs - job dependencies (test waits for lint) - move syntax check to lint job - quieter apt-get and pip output - remove continue-on-error on pip-audit