feat: finalize root api.py with X-Auth-Secret auth security and clean pure sales cohort

scripts/audit_pure_sales_top10.py

@@ -0,0 +1,31 @@
+import sqlite3
+
+def audit_top_pure_sales():
+    conn = sqlite3.connect('data/hiffi_catalog.db')
+    cur = conn.cursor()
+    
+    cur.execute("""
+        SELECT 
+            a.artist_name, 
+            cs.provenance_flag, 
+            cs.audited_sales_units 
+        FROM commercial_sales cs
+        JOIN artists a ON cs.artist_id = a.artist_id
+        ORDER BY cs.audited_sales_units DESC
+        LIMIT 15
+    """)
+    
+    records = cur.fetchall()
+    
+    print(f"{'Artist':<25} | {'Provenance':<15} | {'Pure Sales Units':<20}")
+    print("-" * 65)
+    
+    for artist, prov, sales in records:
+        # Using modern f-string formatting with commas
+        sales_val = int(sales) if sales is not None else 0
+        print(f"{str(artist)[:24]:<25} | {str(prov):<15} | {sales_val:20,d}")
+        
+    conn.close()
+
+if __name__ == "__main__":
+    audit_top_pure_sales()