fix: correct tojson|safe usage in templates and update validator

- Remove |safe from |tojson in HTML attributes (x-data) - quotes must
  become " for browsers to parse correctly
- Update LANG-002 and LANG-003 architecture rules to document correct
  |tojson usage patterns:
  - HTML attributes: |tojson (no |safe)
  - Script blocks: |tojson|safe
- Fix validator to warn when |tojson|safe is used in x-data (breaks
  HTML attribute parsing)
- Improve code quality across services, APIs, and tests

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

tests/unit/models/schema/test_order.py

@@ -1,18 +1,17 @@
 # tests/unit/models/schema/test_order.py
 """Unit tests for order Pydantic schemas."""
+
 import pytest
 from pydantic import ValidationError
 
 from models.schema.order import (
+    OrderAddressCreate,
+    OrderCreate,
     OrderItemCreate,
     OrderItemResponse,
-    OrderAddressCreate,
-    OrderAddressResponse,
-    OrderCreate,
-    OrderUpdate,
-    OrderResponse,
-    OrderDetailResponse,
     OrderListResponse,
+    OrderResponse,
+    OrderUpdate,
 )
 
 
@@ -253,7 +252,14 @@ class TestOrderUpdateSchema:
 
     def test_valid_status_values(self):
         """Test all valid status values."""
-        valid_statuses = ["pending", "processing", "shipped", "delivered", "cancelled", "refunded"]
+        valid_statuses = [
+            "pending",
+            "processing",
+            "shipped",
+            "delivered",
+            "cancelled",
+            "refunded",
+        ]
         for status in valid_statuses:
             update = OrderUpdate(status=status)
             assert update.status == status