chore: Fix CI — lint, mypy, HACS bluetooth dep

- flake8: drop trailing blank lines in state.py; remove unused imports
  from test_auth.py and test_transport_health.py.
- mypy: guard update_interval (DataUpdateCoordinator allows None),
  type the list[] and service_info/change callback parameters in
  setup_ble_subscriptions / _handle_ble_advertisement, add type-ignore
  for bleak_retry_connector's unmarked re-export, and guard
  self._email / self._password before passing into
  validate_govee_credentials from the 2FA step.
- manifest: add "bluetooth" to after_dependencies — HACS validator
  was rejecting the manifest for referencing the component without
  declaring it (soft dep, since BLE is optional).
- gitignore: exclude .cc-sessions/, .claude/, sprints/ session
  artifacts that shouldn't be in the repo.

No behavioural changes. Bumps version to 2026.4.7 so users get the
first green build since v2026.4.3.

658 tests passing. flake8 clean. mypy clean locally.

Author: Tom Lasswell

.gitignore

@@ -155,4 +155,9 @@ docs/epic-*.md
 docs/legacy-*.md
 
 # GitHub profile README (not part of this project)
-profile-README.md
+profile-README.md
+# Blitz / Claude session artifacts (local tooling, not repo state)
+.cc-sessions/
+.claude/
+sprints/
+sprint-registry.json

custom_components/govee/api/ble.py

@@ -51,7 +51,7 @@
 from typing import TYPE_CHECKING
 
 from bleak import BleakClient
-from bleak_retry_connector import (
+from bleak_retry_connector import (  # type: ignore[attr-defined]
     BleakClientWithServiceCache,
     BleakError,
     close_stale_connections_by_address,

custom_components/govee/config_flow.py

@@ -258,6 +258,10 @@ async def async_step_verification_code(
 
         if user_input is not None:
             code = user_input["verification_code"].strip()
+            if self._email is None or self._password is None:
+                # Defensive — the verification step should never be reached
+                # without these already set by the preceding account step.
+                return self.async_abort(reason="missing_credentials")
             try:
                 self._iot_credentials = await validate_govee_credentials(
                     self._email,

custom_components/govee/coordinator.py

@@ -390,7 +390,7 @@ def unregister_observer(self, observer: IStateObserver) -> None:
     # BLE direct transport
     # ------------------------------------------------------------------ #
 
-    def setup_ble_subscriptions(self) -> list:
+    def setup_ble_subscriptions(self) -> list[Any]:
         """Subscribe to BLE advertisements for nearby Govee devices.
 
         Called from ``async_setup_entry`` after the coordinator is created.
@@ -403,10 +403,10 @@ def setup_ble_subscriptions(self) -> list:
         if not HAS_BLUETOOTH:
             return []
 
-        unsubs = []
+        unsubs: list[Any] = []
 
         @callback
-        def _on_ble_advertisement(service_info, change) -> None:
+        def _on_ble_advertisement(service_info: Any, change: Any) -> None:
             self._handle_ble_advertisement(service_info)
 
         for prefix in _BLE_NAME_PREFIXES:
@@ -439,7 +439,7 @@ def _on_ble_advertisement(service_info, change) -> None:
         return unsubs
 
     @callback
-    def _handle_ble_advertisement(self, service_info) -> None:
+    def _handle_ble_advertisement(self, service_info: Any) -> None:
         """Correlate a BLE advertisement with a known cloud device.
 
         Matching strategy (see ``docs/_research/2026-04-09_multi-transport-single-entity.md``):
@@ -790,9 +790,12 @@ async def _fetch_device_state(
                 # the optimistic power/brightness for a short window instead
                 # of flipflopping the UI. MQTT pushes clear the window early.
                 grace_cap = OPTIMISTIC_GRACE_CAP_SECONDS
-                grace_window = min(
-                    2 * self.update_interval.total_seconds(), grace_cap
+                poll_seconds = (
+                    self.update_interval.total_seconds()
+                    if self.update_interval is not None
+                    else 60.0
                 )
+                grace_window = min(2 * poll_seconds, grace_cap)
                 optimistic_ts = existing_state.last_optimistic_update
                 in_grace = (
                     existing_state.source == "optimistic"

custom_components/govee/manifest.json

@@ -10,6 +10,7 @@
   "codeowners": ["@lasswellt"],
   "config_flow": true,
   "dependencies": [],
+  "after_dependencies": ["bluetooth"],
   "documentation": "https://github.com/lasswellt/govee-homeassistant/blob/master/README.md",
   "homekit": {},
   "integration_type": "hub",
@@ -23,6 +24,6 @@
     "cryptography>=41.0.0"
   ],
   "ssdp": [],
-  "version": "2026.4.6",
+  "version": "2026.4.7",
   "zeroconf": []
 }

custom_components/govee/models/state.py

@@ -214,7 +214,6 @@ def update_from_api(self, data: dict[str, Any]) -> None:
                         except (TypeError, ValueError):
                             pass
 
-
     def update_from_mqtt(self, data: dict[str, Any]) -> None:
         """Update state from MQTT push message.
 

tests/test_auth.py

@@ -17,7 +17,7 @@
 import json
 from contextlib import asynccontextmanager
 from typing import Any
-from unittest.mock import AsyncMock, MagicMock, patch
+from unittest.mock import AsyncMock, MagicMock
 
 import aiohttp
 import pytest

tests/test_transport_health.py

@@ -2,12 +2,9 @@
 
 from __future__ import annotations
 
-import time
 from datetime import datetime, timedelta, timezone
 from unittest.mock import MagicMock
 
-import pytest
-
 from custom_components.govee.coordinator import GoveeCoordinator
 from custom_components.govee.models import GoveeDeviceState, TransportHealth