[SECURITY] Enforce encrypted credential startup gates and permission compliance auditing

[Copilot]

Pull Request

Description

The pipeline failed because Code Quality stopped on black --check diffs, which also caused the downstream notify job to fail. This PR resolves that failure by applying formatting-only changes to the two flagged security-related modules.

• Pipeline unblock
  • Reformatted only:
    • app/pt_credentials.py
    • app/pt_security_logger.py
• Change scope
  • No logic, control-flow, API, or behavior changes.
  • No dependency, config, or workflow changes.

Example of the applied formatting pattern:

sec_logger.log_credential_use(
    "robinhood", "get_credentials_migrated"
)

Related Issues

Type of Change

• 🐛 Bug fix (non-breaking change that fixes an issue)
• ✨ New feature (non-breaking change that adds functionality)
• 💥 Breaking change (fix or feature that would cause existing functionality to not work as expected)
• 📚 Documentation update
• 🔒 Security fix
• 🔧 Refactoring (no functional changes)
• ⚡ Performance improvement
• 🧪 Test coverage improvement

Testing

Testing Performed

• Unit tests added/updated
• Integration tests added/updated
• Manual testing completed
• Performance testing completed
• Security testing completed

Test Results

Formatting-only changes removed Black diffs in the previously failing files.
No functional behavior changes were introduced by this PR.

Security Checklist

• No hardcoded credentials or API keys
• Input validation implemented where needed
• Error handling doesn't expose sensitive information
• Authentication/authorization considered
• Security review completed (if security-related changes)

Code Quality Checklist

• Code follows project style guidelines
• Code is well-commented and documented
• No debugging code or console.log statements left
• Error handling is appropriate
• Performance impact considered
• Backward compatibility maintained (or breaking change documented)

Deployment Considerations

• Database migrations included (if needed)
• Environment variables documented (if new ones added)
• Configuration changes documented
• Rollback plan documented (for significant changes)

Documentation

• README updated (if needed)
• API documentation updated (if applicable)
• Inline code comments added/updated
• Changelog updated

Screenshots (if applicable)

Additional Notes

No unrelated cleanup was included; this PR intentionally stays scoped to the CI-blocking formatting deltas.

---

Review Checklist for Reviewers

• Code logic is sound and efficient
• Security implications reviewed
• Test coverage is adequate
• Documentation is clear and complete
• No performance regressions introduced
• Breaking changes are properly documented

[sjackson0109]

cancelled - not very happy with copilot's efforts here.