style: format docs, fix user_permissions variable scoping in auth middleware

Apply ruff line-wrapping formatting to docs and test files.
Clarify auth middleware: extract user_permissions once before
subsystem check, removing conditional variable scoping.

lib/db_sqlite.py

@@ -56,7 +56,9 @@ class SQLiteBackend(Database):
         # Schema init is handled by direct execution, not prepared statements
         # init_tables is called as _execute_direct(INIT_SQL)
         # Users
-        Q_INSERT_USER: ("INSERT INTO users (username, password_hash, jwt_secret) VALUES (?, ?, ?)"),
+        Q_INSERT_USER: (
+            "INSERT INTO users (username, password_hash, jwt_secret) VALUES (?, ?, ?)"
+        ),
         Q_SELECT_USER_BY_NAME: (
             "SELECT id, username, password_hash, jwt_secret, created_at FROM users WHERE username = ?"
         ),