chore: ruff py313, conftest unification, audit log, app factory comune

- pyproject.toml: ruff target-version py311 → py313 (auto-fix 42 lint
  warnings via UP rules); aggiunto consider_namespace_packages = true
  che risolve la collisione conftest tra servizi e permette di lanciare
  pytest sull'intera suite cross-servizio.

- mcp_common.audit: nuovo helper audit_write_op() con logger dedicato
  mcp.audit. Wirato su tutti i write endpoint di deribit, bybit, alpaca
  e hyperliquid (place_order, place_combo_order, cancel_*, set_*,
  close_*, transfer_*, switch_*, amend_*) con principal + target +
  payload non-sensibile + result summarizzato.

- mcp_common.app_factory: ExchangeAppSpec + run_exchange_main()
  centralizza il boilerplate dei __main__.py (configure_root_logging,
  fail_fast_if_missing, summarize, load creds, resolve_environment,
  load token store, uvicorn). I 4 __main__.py exchange ridotti da ~60
  LOC ognuno a ~25 LOC dichiarativi. mcp_common.env_validation
  promosso da mcp_deribit (mantenuto re-export shim per back-compat
  test_env_validation).

- 8 test nuovi (4 audit + 4 app_factory). Suite full: 450/450 verdi.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

services/mcp-deribit/src/mcp_deribit/__main__.py

@@ -1,63 +1,29 @@
 from __future__ import annotations
 
-import json
-import os
-
-import uvicorn
-from mcp_common.auth import load_token_store_from_files
-from mcp_common.environment import resolve_environment
-from mcp_common.logging import configure_root_logging
+from mcp_common.app_factory import ExchangeAppSpec, run_exchange_main
 
 from mcp_deribit.client import DeribitClient
-from mcp_deribit.env_validation import (
-    fail_fast_if_missing,
-    require_env,
-    summarize,
-)
 from mcp_deribit.server import create_app
 
-configure_root_logging()  # CER-P5-009: JSON default, env LOG_FORMAT=text per dev
-
-
-def main():
-    # CER-P5-010: fail-fast boot su env mandatory
-    fail_fast_if_missing(["CREDENTIALS_FILE"])
-    summarize(["CREDENTIALS_FILE", "CORE_TOKEN_FILE", "OBSERVER_TOKEN_FILE", "PORT", "HOST"])
-    creds_file = require_env("CREDENTIALS_FILE", "deribit credentials JSON path")
-    with open(creds_file) as f:
-        creds = json.load(f)
-
-    env_info = resolve_environment(
-        creds,
-        env_var="DERIBIT_TESTNET",
-        flag_key="testnet",
-        exchange="deribit",
-        default_base_url_live="https://www.deribit.com/api/v2",
-        default_base_url_testnet="https://test.deribit.com/api/v2",
-    )
-
-    client = DeribitClient(
+SPEC = ExchangeAppSpec(
+    exchange="deribit",
+    creds_env_var="CREDENTIALS_FILE",
+    env_var="DERIBIT_TESTNET",
+    flag_key="testnet",
+    default_base_url_live="https://www.deribit.com/api/v2",
+    default_base_url_testnet="https://test.deribit.com/api/v2",
+    default_port=9011,
+    build_client=lambda creds, env_info: DeribitClient(
         client_id=creds["client_id"],
         client_secret=creds["client_secret"],
         testnet=(env_info.environment == "testnet"),
-    )
+    ),
+    build_app=create_app,
+)
 
-    token_store = load_token_store_from_files(
-        core_token_file=os.environ.get("CORE_TOKEN_FILE"),
-        observer_token_file=os.environ.get("OBSERVER_TOKEN_FILE"),
-    )
-    app = create_app(
-        client=client,
-        token_store=token_store,
-        creds=creds,
-        env_info=env_info,
-    )
-    uvicorn.run(
-        app,
-        log_config=None,  # CER-P5-009: delega al root JSON logger
-        host=os.environ.get("HOST", "0.0.0.0"),
-        port=int(os.environ.get("PORT", "9011")),
-    )
+
+def main():
+    run_exchange_main(SPEC)
 
 
 if __name__ == "__main__":