lint: Start using ruff ruleset "flake8-bandit"

[jku]

• Remove bandit
• Add ruff ruleset "flake8-bandit"
• verify_release is now checked by bandit
  • Avoid some asserts as suggested
  • ignore a subprocess.run lint: it seems dumb
• ignore all bandit rules for tests and examples (just like before)

The ruff rules list is not 100% same as bandit itself but very close.

[coveralls]

Pull Request Test Coverage Report for Build 8022223491

Details

• 0 of 0 changed or added relevant lines in 0 files are covered.
• No unchanged relevant lines lost coverage.
• Overall coverage remained the same at 97.725%

---

Totals
Change from base Build 8005157007:	0.0%
Covered Lines:	1463
Relevant Lines:	1488

---

💛 - Coveralls