style: apply ruff lint --fix + ruff format across the tree

feat(integrity): wire ADR-0010 on-load verify + re-pin 0.1.9 (deploy slice)

feat(loveless): Role-2 signature consumable — resolve private signature URLs

refactor(loader): centralize authenticated URL->local resolution