Clean Campaign audit and test resources

src/govoplan_campaign/backend/campaign/models.py

@@ -31,7 +31,7 @@ class FieldType(StrEnum):
     INTEGER = "integer"
     DOUBLE = "double"
     DATE = "date"
-    PASSWORD = "password"
+    PASSWORD = "password"  # noqa: S105  # nosec B105 - field type vocabulary.
 
 
 class RecipientType(StrEnum):

src/govoplan_campaign/backend/reports/campaigns.py

@@ -81,7 +81,7 @@ def _load_delivery_info(version: CampaignVersion | None, jobs: list[CampaignJob]
         "execution_snapshot_hash": None,
         "execution_snapshot_at": None,
         "snapshot_version": None,
-        "build_token": None,
+        "build_token": None,  # nosec B105 - absent report value, not a credential.
         "built_at": None,
         "job_manifest_sha256": None,
         "job_count": 0,

src/govoplan_campaign/backend/services/zip_service.py

@@ -41,7 +41,7 @@ def _normalized_members(files: Iterable[Path | ArchiveMember]) -> list[ArchiveMe
 def create_zip_archive(
     output_path: Path,
     files: Iterable[Path | ArchiveMember],
-    password: str = "",
+    password: str = "",  # nosec B107 - empty means an unencrypted archive.
     method: str = ZIP_METHOD_AES,
 ) -> Path:
     """Create a ZIP archive, optionally using AES or legacy ZipCrypto encryption."""