fix(cli): verify each system dependency install step before the next

.github/workflows/pytest.yml

@@ -5,6 +5,32 @@ on:
   pull_request:
 
 jobs:
+  # ruff and mypy are configured in pyproject.toml but nothing ran them, so
+  # violations accumulated silently. This job keeps that config honest.
+  lint:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+
+      - name: Install lint deps
+        run: |
+          python -m pip install --upgrade pip
+          pip install -c constraints.txt -e .[dev]
+
+      - name: Ruff
+        run: |
+          ruff check .
+
+      - name: Mypy
+        run: |
+          mypy agent_reach
+
   test:
     runs-on: ubuntu-latest
     strategy:

agent_reach/channels/web.py

@@ -2,6 +2,7 @@
 """Web — any URL via Jina Reader. Always available."""
 
 import urllib.request
+
 from .base import Channel
 
 _UA = "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36"