build: broaden the ruff rule set and lint conanfile.py

[megabyde]

Problem

ruff.toml set only line-length, so ruff ran at its default E4,E7,E9,F while clang-tidy ran with
bugprone-*, misc-*, modernize-*, performance-*, and readability-* all as errors. Import
order, obsolete syntax, and common bug patterns went unchecked.

Separately, conanfile.py was neither linted nor formatted: PYTHON_SOURCES covered scripts/ only.

Fix

Select E,F,I,UP,B,SIM,RUF,ANN, and add conanfile.py to PYTHON_SOURCES. ruff format already
agrees with that file, so it brings no churn.

The trap, and why known-third-party is load-bearing

Enabling I naively makes the recipe worse. The repo's conan/ directory (it holds
settings_user.yml) shadows the conan package name, so isort's src detection classifies
from conan import ConanFile as first-party and splits it away from its siblings:

-from conan import ConanFile
 from conan.tools.build import check_min_cppstd
 from conan.tools.cmake import CMakeConfigDeps, CMakeToolchain, cmake_layout
 from conan.tools.files import load
+
+from conan import ConanFile

Confirmed by running the identical file in a scratch directory with and without a conan/ present:
without it ruff reports the imports already correct, with it ruff produces the split above.

known-third-party = ["conan"] restores the correct grouping, and as a result conanfile.py is
untouched by this PR. Flagging it because a future reader could reasonably delete that setting as
redundant.

Choices worth a second opinion

• ANN is included. It already passes on scripts/, so it costs nothing today and keeps the
  existing annotations from rotting. Ignored for conanfile.py, whose methods are Conan callbacks
  reached through an untyped API. Happy to drop it.
• RUF012 ignored for conanfile.py — it flags options / default_options and suggests
  ClassVar or __init__; neither applies, since Conan reads them off the class.
• D (docstrings) left out — it wants 5 more docstrings on short helpers, which read as noise.

Verification

• ruff check and ruff format --check clean over scripts/ and conanfile.py
• make lint and make format-check both exit 0
• conanfile.py byte-identical to main
• recipe still functions: conan install exits 0 and conan inspect resolves version: 0.1.0, so
  set_version() still parses CMakeLists.txt
• the only code change is rename.py's import block

Scope

Half of the test/lint-depth work item. The branch-coverage floor is not here: measuring it turned up
evidence that changes the recommendation, so it needs a decision rather than a quiet bundling.