Move the one directive from the bandit config to the pre-commit config

[jsf9k]

🗣 Description

This pull request moves the one active directive from the bandit configuration to the pre-commit configuration.

💭 Motivation and context

This also allows us to remove the (now unused) Bandit config file. This should have been done as part of #288 but was missed.

🧪 Testing

All automated tests pass.

✅ Pre-approval checklist

• This PR has an informative and human-readable title.
• Changes are limited to a single goal - eschew scope creep!
• All relevant type-of-change labels have been added.
• I have read the CONTRIBUTING document.
• These code changes follow cisagov code standards.
• All new and existing tests pass.

[Copilot]

Pull request overview

This PR removes the now-unused Bandit configuration file by moving its only active directive into the Bandit hook configuration within .pre-commit-config.yaml, keeping the same Bandit behavior for the tests/ tree while simplifying repo configuration.

Changes:

• Update the Bandit pre-commit hook for tests/ to skip B101 via hook args (instead of a .bandit.yml file).
• Remove the .bandit.yml file from the repository.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File	Description
.pre-commit-config.yaml	Replaces the Bandit --config=.bandit.yml usage with an equivalent --skip=B101 argument for the tests-only hook.
.bandit.yml	Deletes the obsolete Bandit config file now that its only active directive lives in pre-commit.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.