GeezerVison

Adds a Bitbucket SCM implementation mirroring the GitHub/GitLab modules
so socketcli can post and update Dependency Overview and Security Issue
comments on Bitbucket Cloud pull requests. Includes config from
BITBUCKET_* Pipelines env vars (Bearer token or username/app-password
auth), comment shape normalization onto the existing Comment dataclass,
and unit tests covering env parsing, event detection, normalization, and
POST/PUT payload shape.

Refs CE-89

Co-Authored-By: Claude Opus 4.7 (1M context) <[email protected]>

- Fix paginated comment fetch: previous code passed base_url='' for the
  absolute 'next' URL, which CliClient (falsy check) silently mapped to
  Socket's API base. Split the URL into origin + path so the request
  hits Bitbucket.
- Drop content.get('markup') body fallback (markup is the format name,
  not body text); fall back to content.get('html') instead.
- Remove dead hasattr() branch in has_thumbsup_reaction.
- Move PROCESSED_MARKER to top of class with a comment explaining why
  there's no Bearer/Basic auth-fallback retry like GitLab has.
- Document that --scm bitbucket exits 2 without BITBUCKET_TOKEN or
  BITBUCKET_USERNAME+BITBUCKET_APP_PASSWORD set.
- Expand tests: pagination (origin split, no-next, error response,
  no-PR), has_thumbsup_reaction (marker present/absent, no-PR,
  exception swallowing), _mark_comment_processed (append, idempotence,
  swallow update error), check_for_socket_comments classification, and
  _split_absolute_url round-trip.

Signed-off-by: lelia <[email protected]>

Required by the check_version workflow now that main is at 2.2.90. Bumps
__version__ in socketsecurity/__init__.py and pyproject.toml; uv.lock
regenerated.

Co-Authored-By: Claude Opus 4.7 (1M context) <[email protected]>

- Cache comment bodies in get_comments_for_pr so has_thumbsup_reaction
  resolves from memory instead of issuing one extra GET per ignore
  comment on every run. _mark_comment_processed refreshes the cache so
  in-run repeat checks also hit it.
- Guard against {"values": null} responses from Bitbucket Cloud — the
  previous .get("values", []) default only fires on missing key, so a
  null value would TypeError on iteration.
- Fail fast in BitbucketConfig.from_env when workspace or repo_slug
  can't be determined, rather than building 404-bound URLs deeper in
  the request flow.
- Drop typing.Tuple in favor of built-in tuple (project targets 3.11+).
- Document BITBUCKET_DEFAULT_BRANCH in the example pipeline since
  Bitbucket Pipelines doesn't export the repo default branch.
- Add tests for cache hits, cache fallback, mark-processed cache
  refresh, null-values pagination, and the new workspace/repo
  validation exit.

Co-Authored-By: Claude Opus 4.7 (1M context) <[email protected]>