[PATCH patatt 0/7] Harden local checks

This series adds a local CI helper and raises patatt's local quality
baseline incrementally while keeping the tree green after each step.

It starts with the checks that already pass, then adds Ruff import and
format enforcement, strict pyright, and ty. The later patches make the
small typing and cleanup changes needed for the stricter checkers, and
remove stale optional-dependency handling for PyNaCl.

Signed-off-by: Tamir Duberstein <[email protected]>
---
Tamir Duberstein (7):
      Add local CI script
      Add Ruff import checks
      Add Ruff format check
      Add pyright strict checks
      Add ty checks
      Reduce dictionary lookups
      Import PyNaCl unconditionally

 ci.sh                               |  10 +
 conftest.py                         |   3 +-
 docs/conf.py                        |   5 +-
 pyproject.toml                      |  18 +-
 src/patatt/__init__.py              | 480 ++++++++++++++++++++++++------------
 tests/conftest.py                   |  21 +-
 tests/test_validation.py            |  25 +-
 tests/unit/test_byhash.py           |   4 +-
 tests/unit/test_devsig_header.py    |  26 +-
 tests/unit/test_get_algo_keydata.py |  22 +-
 tests/unit/test_patatt_message.py   |  27 +-
 11 files changed, 410 insertions(+), 231 deletions(-)
---
base-commit: f09b5a5681c2b7af33aa5b0fcea659f4534eed9b
change-id: 20260419-stronger-type-checking-3702559acba9

Best regards,
--  
Tamir Duberstein <[email protected]>