pre-commit replace bandit with ruff

[JoseRZapata]

♻️ Replace Bandit with ruff in pre-commit

✨ Context

ruff has reimplemented the bandit rules[1], so it can be use that as a better-integrated tool. So enable all the bandit rules and selectively disable some across the codebase and some in just tests where they don't make sense (e.g. flagging use of assert ).

[1] Per astral-sh/ruff#1646 they've implemented nearly all of them, and the remaining ones aren't that important IMO.

🧠 Rationale behind the change

uses less tools in pre-commit and get rid of the GitPython dependency, lees tools less security holes

Type of changes

• 🔥 Improvements (Minor refactoring, code changes or optimizations)
• ✅ Tests (Unit tests, integration tests, end-to-end tests)
• 👷 🔧 CI or Configuration Files

🛠 What does this PR implement

remove bandit form pre-commit and replace it using RUff Rules

change unit test to ignore warning detected by ruff

🧪 How should this be tested?

• make check

• poetry run pytest --cov

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 100.00%. Comparing base (6c37c22) to head (6d96827).

Additional details and impacted files

@@            Coverage Diff            @@
##              main       #45   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files            6         6           
  Lines           63        62    -1     
=========================================
- Hits            63        62    -1