Refactor: do a pass to remove noqa: S* lines

[mikix]

None of the current noqa: S* lines are security issues. But it's still a nicer story if there aren't any.

We have two kinds of security linter exemptions right now:

• SQL injection (because there's no user input involved, it's just basic string formatting)
• assert lines (because it's OK that they get ignored in optimized code, as they are just sanity checks for developers writing new tasks)

So both could be fixed easily enough (SQL maybe would use some version of bound variables and the asserts could be re-written or just dropped).

Not a high priority, but might be nice to do, to simplify the security story.