fix: repair canonical snapshot pipeline imports

[Pigbibi]

Summary

• update stale imports to canonical pipelines/research paths
• remove obsolete test_run_codex_pr_review.py
• align three entrypoint/dependency-pin assertions with current pyproject.toml

Validation

• PYTHONPATH=src python -m pytest -q -> 704 passed, 4 skipped
• python3 -m ruff check <11 changed paths> -> passed
• python3 -m compileall -q src scripts -> passed
• scope/diff check -> 11 authorized files only

No merge or review rerun performed.

[github-actions]

🤖 Codex PR Review

✅ Merge allowed: 1 finding(s) reported but none are blocking

ℹ️ Other Findings

1. 🟡 [MEDIUM] Security in tests/test_run_codex_pr_review.py

The new workflow-delegation test only checks that .github/workflows/codex_pr_review.yml references QuantStrategyLab/AIAuditBridge/.github/workflows/codex_pr_review.yml with some non-empty ref, so it passes even when the repository is using the mutable @main branch. That workflow is triggered by pull_request_target and grants id-token: write, issues: write, and pull-requests: write, so leaving it on a branch means future changes in AIAuditBridge/main can change privileged PR-review behavior without any pinning guardrail in this repository. (line 18)

Suggestion: Tighten the test to require an immutable 40-character commit SHA and update .github/workflows/codex_pr_review.yml to use that SHA instead of @main.

---

Review by Codex PR Review bot • PR