Provide a sensible set of starting settings for a good
degree of security and document them well enough that
future operations people don't have to dig for hours
to understand what is being done.
* add flake, black, mypy, and bandit to run
* fixes issues flake and black complained about
* make mypy run successfully, add configuration files rather than specifying in ci
* respond to feedback
* configure bandit, ignore a file used only in local development