chore: remove DeepScan leftovers

CLAUDE.md

@@ -7,7 +7,7 @@ This is not aspirational. This is a hard requirement. If you push code that fail
 
 ## Thresholds (non-negotiable)
 
-- **Issues on all providers:** 0 (SonarCloud, CodeQL, QLTY, DeepSource, DeepScan, Sentry)
+- **Issues on all providers:** 0 (SonarCloud, CodeQL, QLTY, DeepSource, Sentry)
 - **Coverage:** 100% line AND branch (Codecov, SonarCloud)
 - **Security alerts:** 0 (Dependabot, CodeQL, Semgrep)
 - **Suppressions:** FORBIDDEN. No `// NOSONAR`, no `#pragma warning disable`, no `# noqa`, no `[SuppressMessage]`. Fix the code.

docs/quality/QUALITY_ZERO_GATES.md

@@ -3,7 +3,7 @@
 This repository is configured for strict quality enforcement:
 
 - Coverage target: 100% (project + patch)
-- Mandatory zero-open findings: Sonar, Codacy, Semgrep, Sentry, DeepScan
+- Mandatory zero-open findings: Sonar, Codacy, Semgrep, Sentry
 - Fail-closed secrets preflight
 - Aggregated required-context assertion via `Quality Zero Gate`
 

ruff.toml

@@ -38,9 +38,8 @@ ignore = ["E501"]
 # E402 (module-level import not at top): these SaaS-zero check scripts insert the
 # repo's helper dir onto sys.path before importing security_helpers — a
 # deliberate bootstrap pattern. The scripts are slated for removal in the lean-
-# gate migration runbook (they back the deleted Sonar/Sentry/Codacy/DeepScan
+# gate migration runbook (they back the deleted Sonar/Sentry/Codacy
 # gates); ignoring E402 here avoids churning soon-to-be-deleted code.
 "scripts/quality/check_sentry_zero.py" = ["E402"]
 "scripts/quality/check_sonar_zero.py" = ["E402"]
 "scripts/quality/check_codacy_zero.py" = ["E402"]
-"scripts/quality/check_deepscan_zero.py" = ["E402"]

tests/python/test_helper_bootstrap.py

@@ -20,7 +20,6 @@
 
 MODULES = [
     "scripts/quality/check_codacy_zero.py",
-    "scripts/quality/check_deepscan_zero.py",
     "scripts/quality/check_sentry_zero.py",
     "scripts/quality/check_sonar_zero.py",
 ]

tests/python/test_network_request_helpers.py

@@ -13,7 +13,6 @@
 from conftest import load_script_module
 
 codacy = load_script_module("scripts/quality/check_codacy_zero.py", "check_codacy_zero_net")
-deepscan = load_script_module("scripts/quality/check_deepscan_zero.py", "check_deepscan_zero_net")
 sentry = load_script_module("scripts/quality/check_sentry_zero.py", "check_sentry_zero_net")
 sonar = load_script_module("scripts/quality/check_sonar_zero.py", "check_sonar_zero_net")
 required = load_script_module(
@@ -60,11 +59,6 @@ def test_codacy_request_json_post_with_data(monkeypatch) -> None:
     assert captured[0].data is not None
 
 
-def test_deepscan_request_json(monkeypatch) -> None:
-    _patch_urlopen(monkeypatch, deepscan, _Resp(json.dumps({"count": 0}).encode()))
-    assert deepscan._request_json("https://api.deepscan.io/x", "tok") == {"count": 0}
-
-
 def test_sonar_request_json(monkeypatch) -> None:
     _patch_urlopen(monkeypatch, sonar, _Resp(json.dumps({"paging": {"total": 0}}).encode()))
     assert sonar._request_json("https://sonarcloud.io/api/x", "auth") == {"paging": {"total": 0}}