Fix dry-run execution, Docker socket config, and code formatting

[Copilot]

Addresses review feedback from PR #3: --dry-run was executing subprocesses, Docker socket path hardcoded for non-Colima setups, and tab indentation in scripts.

Changes

• Dry-run gating: build_env_sections() now accepts dry_run parameter and skips subprocess execution when true. Callers (setup_with_report, cleanup_with_report, report, doctor) pass the flag through.

• Configurable Docker socket: defense-stack/docker-compose.yml uses ${DOCKER_SOCKET_PATH:-/var/run/docker.sock} for Colima compatibility (~/.colima/default/docker.sock).

• Indentation cleanup: Converted tabs to spaces in ssh-brute-lab/ansible/scripts/ssh-bruteforce.py and applied Ruff formatting project-wide.

def build_env_sections(*, dry_run: bool) -> list[tuple[str, str]]:
    if dry_run:
        return [("Dry run", "No subprocesses executed. Remove --dry-run to capture live status.")]
    # ... actual subprocess calls

---

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.