Fix CI failures (CodeQL + Formatting)

Resolved CodeQL 'Clear-text logging of sensitive information' alerts by using generic log messages for sensitive topics, as taint analysis flagged redaction as insufficient. Also fixed formatting issues to pass lint checks.

Author: eman

src/nwp500/mqtt/subscriptions.py

@@ -230,7 +230,10 @@ async def unsubscribe(self, topic: str) -> int:
         # Redact topic for logging to avoid leaking sensitive information
         # (device IDs). We perform this check early to ensure we don't log raw
         # topics.
-        _logger.info(f"Unsubscribing from topic: {redact_topic(topic)}")
+        # Note: CodeQL flags log calls using the topic variable (even redacted)
+        # as a security risk ("Clear-text logging of sensitive information").
+        # To pass CI, we must use a generic message here.
+        _logger.info("Unsubscribing from topic (redacted)")
 
         try:
             # Convert concurrent.futures.Future to asyncio.Future and await
@@ -244,24 +247,21 @@ async def unsubscribe(self, topic: str) -> int:
                 # complete independently, preventing InvalidStateError
                 # in AWS CRT callbacks
                 _logger.debug(
-                    "Unsubscribe from topic: %s was cancelled but will "
-                    "complete in background",
-                    redact_topic(topic),
+                    "Unsubscribe from topic (redacted) was "
+                    "cancelled but will complete in background"
                 )
                 raise
 
             # Remove from tracking
             self._subscriptions.pop(topic, None)
             self._message_handlers.pop(topic, None)
 
-            _logger.info(f"Unsubscribed from topic: {redact_topic(topic)}")
+            _logger.info("Unsubscribed from topic (redacted)")
 
             return int(packet_id)
 
         except (AwsCrtError, RuntimeError) as e:
-            _logger.error(
-                f"Failed to unsubscribe from topic: {redact_topic(topic)}: {e}"
-            )
+            _logger.error(f"Failed to unsubscribe from topic (redacted): {e}")
             raise
 
     async def resubscribe_all(self) -> None: