fix(tooling): resolve package-owned tool allowlist

scripts/devtools/debug_s35_import.py

@@ -3,8 +3,8 @@ Debug script for S35 Transform Isolation.
 Verifies that the correct executor (TransformProcessRunner) is allowed/loaded.
 """
 
-from pathlib import Path
 import sys
+from pathlib import Path
 
 # Ensure project root is in path
 ROOT = Path(__file__).resolve().parents[2]

scripts/devtools/verify_s30_doctor.py

@@ -3,8 +3,8 @@ Verify S30 Security Doctor output.
 """
 
 import os
-from pathlib import Path
 import sys
+from pathlib import Path
 
 # Add project root to path
 ROOT = Path(__file__).resolve().parents[2]