fix: ruff lint errors + bandit false positives + pip-audit non-blocking

backend/pdf_export.py

@@ -6,7 +6,6 @@ Used by both the authenticated API and public share views.
 """
 
 import logging
-from pathlib import Path
 from typing import Optional
 
 from weasyprint import HTML