fix: address critical and medium post-audit findings

fix: address post-audit review findings across docs and source

ci(hooks): add pre-commit config with ruff and mypy hooks

fix(scripts): replace destructive del with slicing in create_stats

fix(logging): replace f-string logging with lazy %s formatting

Refactor app with security fixes, error handling, and type safety