chore: enforce ruff lint and format standards across backend

backend/app/auth/deps.py

@@ -3,6 +3,7 @@
 from __future__ import annotations
 
 from collections.abc import Iterator
+from typing import Annotated
 
 from fastapi import Depends, HTTPException, Request
 from sqlmodel import Session
@@ -21,7 +22,7 @@ def get_db() -> Iterator[Session]:
 
 
 def get_optional_user(
-    request: Request, session: Session = Depends(get_db)
+    request: Request, session: Annotated[Session, Depends(get_db)]
 ) -> User | None:
     session_id = request.cookies.get(SESSION_COOKIE)
     if not session_id:
@@ -32,24 +33,20 @@ def get_optional_user(
     return service.get_user(session, record.user_id)
 
 
-def get_current_user(
-    request: Request, session: Session = Depends(get_db)
-) -> User:
+def get_current_user(request: Request, session: Annotated[Session, Depends(get_db)]) -> User:
     user = get_optional_user(request, session)
     if user is None:
         raise HTTPException(status_code=401, detail="not authenticated")
     return user
 
 
-def require_admin(user: User = Depends(get_current_user)) -> User:
+def require_admin(user: Annotated[User, Depends(get_current_user)]) -> User:
     if user.role != "admin":
         raise HTTPException(status_code=403, detail="admin only")
     return user
 
 
-def resolve_tenant(
-    user: User | None, explicit: str | None, default: str = "default"
-) -> str:
+def resolve_tenant(user: User | None, explicit: str | None, default: str = "default") -> str:
     """Tenant comes from the session; the body/query param is a deprecated
     fallback for unauthenticated callers."""
     if user is not None: