fix: move success computation to end of run_tests and remove it from except block

fix: use sys.executable -m pytest to ensure pytest is always findable in sandbox

fix: add missing 'success' key to run_tests return dict

fix: suppress bandit B404 warning on subprocess import in pytest_runner

fix: import subprocess in pytest_runner so timeout patch target exists and handle TimeoutExpired

fix: import subprocess in pytest_runner so timeout patch target exists and handle TimeoutExpired

security: add sandboxed subprocess runner with CPU/memory resource limits

fixed lint

fix: use sys.executable -m pytest in pytest_runner for venv compatibility

fix: guard against ValueError when parsing pytest output integers

fix

fix: suppress remaining bandit warnings with nosec comments

fix: add nosec comments and fix bandit txt format in static analyzer

fix: resolve all ruff linting errors in __init__ files and CI

feat: add all tools - github, scanner, ast, pytest, static analyzer