Pre-release security audit

[mrixlam]

Summary

This PR includes security audit results conducted prior to first official release. Also include tests for future reference.

Type of change

• Bug fix (non-breaking change that fixes an issue)
• [ x] New feature (non-breaking change that adds functionality)
• Breaking change (fix or feature that changes existing behavior)
• Documentation update
• Maintenance / refactor / CI

How has this been tested?

Ran repository's pytest with default lint

Checklist

• [ x] My code follows the project style (passes ruff check and black --check).
• [ x] Type checks pass (mypy mpasdiag/).
• [ x] I have added or updated tests that cover my changes.
• [ x] All tests pass locally (pytest tests/).
• [ x] I have updated the documentation (README / docstrings) as needed.
• I have added an entry to CHANGELOG.md under "Unreleased".
• [ x] I have read the CONTRIBUTING guidelines.

[codecov]

Codecov Report

❌ Patch coverage is 94.59459% with 4 lines in your changes missing coverage. Please review.

Files with missing lines	Patch %	Lines
mpasdiag/processing/remapping.py	84.61%	4 Missing ⚠️

📢 Thoughts on this report? Let us know!

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud