fix(v2): enforce repository protocol safety

tests/integration/test_repository_safety.py

@@ -45,7 +45,7 @@ def test_repository_inspection_rejects_noncanonical_metadata(tmp_path: Path) ->
         '{"encryption":"none","compression":"none","format_version":1}\n'
     )
     with pytest.raises(RepositoryError, match="canonical"):
-        inspect_repository(result.root)
+        inspect_repository(settings, result.root)
 
 
 @pytest.mark.asyncio

tests/security/test_session_security.py

@@ -148,7 +148,8 @@ async def test_logout_revocation_survives_app_restart(tmp_path) -> None:
         transport=ASGITransport(restarted), base_url=settings.public_base_url
     ) as client:
         rejected = await client.get(
-            "/api/v2/auth/session", headers={"Cookie": f"backup_tool_session={copied_cookie}"}
+            "/api/v2/auth/session",
+            headers={"Cookie": f"backup_tool_session={copied_cookie}"},
         )
     assert rejected.status_code == 401
     await restarted.state.engine.dispose()