ci: fix ruff format + hadolint DL3021

ruff format controller.py (line-length wrapping); Dockerfile COPY
multi-arg destination must end with / (DL3021).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

Author: Varashi

Dockerfile

@@ -11,7 +11,7 @@ WORKDIR /app
 RUN pip install --no-cache-dir --disable-pip-version-check \
       pyVmomi==8.0.3.0.1 kubernetes==31.0.0
 
-COPY controller.py fence.py .
+COPY controller.py fence.py ./
 
 # Default entrypoint = maintenance controller. The fence controller (fence.py)
 # is the same image with the command overridden to `python -u fence.py`.

controller.py

@@ -483,14 +483,14 @@ def uncordon(self, node_name):
 
     def has_out_of_service_taint(self, node_name) -> bool:
         node = self.get_node(node_name)
-        return any(
-            t.key == OUT_OF_SERVICE_TAINT_KEY for t in (node.spec.taints or [])
-        )
+        return any(t.key == OUT_OF_SERVICE_TAINT_KEY for t in (node.spec.taints or []))
 
     def _patch_taints(self, node_name, taints):
         # sanitize_for_serialization turns V1Taint objects into proper camelCase
         # API dicts (incl. timeAdded), so existing taints are preserved verbatim.
-        body = {"spec": {"taints": self.core.api_client.sanitize_for_serialization(taints)}}
+        body = {
+            "spec": {"taints": self.core.api_client.sanitize_for_serialization(taints)}
+        }
         self.core.patch_node(node_name, body)
 
     def apply_out_of_service_taint(self, node_name):
@@ -518,7 +518,9 @@ def remove_out_of_service_taint(self, node_name):
         if not any(t.key == OUT_OF_SERVICE_TAINT_KEY for t in taints):
             return
         if DRY_RUN:
-            log.info(f"[DRY RUN] Would un-fence {node_name} (remove out-of-service taint)")
+            log.info(
+                f"[DRY RUN] Would un-fence {node_name} (remove out-of-service taint)"
+            )
             return
         log.info(f"Un-fencing {node_name}: removing {OUT_OF_SERVICE_TAINT_KEY} taint")
         kept = [t for t in taints if t.key != OUT_OF_SERVICE_TAINT_KEY]