V4.6 Phase 7: drive ty check to zero and add a blocking quality gate [HIGH-06]

Baseline was 207 diagnostics. Two real bugs were hiding in the noise:

- tools/run_destructive_tests.py imported ctypes.wintypes at module scope,
  which raises on non-Windows, and called fcntl unconditionally. The Windows
  and POSIX implementations now live under a module-level sys.platform split.
- tests/ui/test_sources_page.py constructed Source(...) without document_id.

Structural fixes, not suppressions:

- New src/transcription/db/loading.py owns the SQLModel-field to
  QueryableAttribute reinterpretation via orm_attribute()/selectinload()/
  defer(). This removed 42 "# pyright: ignore[reportArgumentType]" comments
  across documents/jobs/people/sources. Its docstring records that
  selectinload(A.b, B.c) is NOT equivalent to the chained form: varargs
  applies the selectin strategy only to the last path element, which under
  lazy="raise" raises InvalidRequestError at render time.
- db/session.py transaction_scope no longer accepts or yields
  AsyncSessionTransaction. No caller ever passed one, sessionmaker.begin()
  yields an AsyncSession, and the dead branch was latently buggy because
  services call .exec(). Cleared 7 workflows.py diagnostics.
- services/registry.py RegistryService is bound by a new RegistryEntry
  Protocol instead of bare SQLModel, so the shared implementation can read
  id/label/normalized_label/is_active. Cleared 9 diagnostics.
- Column expressions in sources.py/jobs.py/test_store.py wrap in sqlmodel
  col(), the idiom already used in registry.py.
- read_source_navigation wraps its literal tuple bounds in literal().
- normalization.py narrows with isinstance(image, TiffImageFile) rather than
  comparing image.format, since tag_v2 is TIFF-only.
- linked_people.render uses @ui.refreshable_method, the NiceGUI API for bound
  methods.
- The OpenRouter capturing client re-raises ResponseNotRead when the response
  stream is not async rather than mis-wrapping it.

Tooling gate:

- New .pre-commit-config.yaml runs ruff check and ty check as blocking hooks.
  No pre-commit config previously existed. Negative-tested: injecting a type
  error fails both hooks.
- The last two "# pyright: ignore" comments (config.py) are removed; ty does
  not honor pyright directives. One "# ty: ignore" remains, in
  tests/test_prompts.py, where the test deliberately assigns to a frozen
  field to assert ValidationError.
- asyncio_default_fixture_loop_scope is pinned to "function" so
  pytest-asyncio behavior does not shift on upgrade.

Verification: ruff check clean, ty check reports 0 diagnostics, 292 passed
and 4 skipped, pre-commit passes and demonstrably fails on a regression, and
tools/run_destructive_tests.py runs on Windows.

Co-authored-by: Copilot App <[email protected]>

tests/services/test_normalization.py

@@ -14,6 +14,7 @@ from transcription.db.models import JobSource
 from transcription.db.models import Source
 from transcription.providers import RequestManifest
 from transcription.providers import TranscriptionResult
+from transcription.providers.evidence import SourceEvidenceReference
 from transcription.providers.evidence import build_software_context
 from transcription.services import ServiceBundle
 from transcription.services.documents import DocumentService
@@ -62,7 +63,9 @@ def test_orientation_three_is_physically_rotated_and_metadata_removed(tmp_path):
     with Image.open(path) as source_image, Image.open(io.BytesIO(result.content)) as derivative:
         assert source_image.getexif()[274] == 3
         assert derivative.getexif().get(274, 1) == 1
-        assert derivative.getpixel((0, 0))[2] > derivative.getpixel((0, 0))[0]
+        pixel = derivative.getpixel((0, 0))
+        assert isinstance(pixel, tuple)
+        assert pixel[2] > pixel[0]
 
 
 @pytest.mark.unit
@@ -130,7 +133,9 @@ async def test_resolve_provider_input_persists_exact_derivative(default_session_
     assert provider_input.derivative_id == artifacts[0].id
     assert provider_input.path.read_bytes() != original
     assert hashlib.sha256(provider_input.path.read_bytes()).hexdigest() == provider_input.digest_sha256
-    assert artifacts[0].coordinate_metadata["original_orientation"] == 3
+    coordinate_metadata = artifacts[0].coordinate_metadata
+    assert coordinate_metadata is not None
+    assert coordinate_metadata["original_orientation"] == 3
 
 
 @pytest.mark.integration
@@ -219,8 +224,11 @@ async def test_worker_sends_exact_derivative_and_links_attempt_evidence(
     attempts = await services.sources.list_execution_attempts(source_id=source.id)
     artifacts = await services.sources.list_processing_artifacts(source_id=source.id)
     source_reference = captured["source_reference"]
+    assert isinstance(source_reference, SourceEvidenceReference)
+    captured_bytes = captured["bytes"]
+    assert isinstance(captured_bytes, bytes)
     assert source_path.read_bytes() == original
-    assert hashlib.sha256(captured["bytes"]).hexdigest() == source_reference.digest_sha256
+    assert hashlib.sha256(captured_bytes).hexdigest() == source_reference.digest_sha256
     assert source_reference.derivative_id is not None
     assert {artifact.artifact_type for artifact in artifacts} == {
         "orientation_normalized_model_input",