style: apply ruff lint --fix + ruff format across the tree

Dedup: extract subset_and_require_group shared by activity_stats + microarray

HF wheel registry, pinned deps, apt probe, security scan, API-key fallback

Remove dead code and standardize MCP tool return schemas

Add PDAC dataset adapter, workflow, semantic, and analysis layers