fix: replace python3 with py/jq throughout scripts and docs

Windows Store python3 stub returns exit 49 instead of running Python.
Replace with: py (Windows launcher) for actual Python code, jq for
simple JSON extraction. Reorder fallback loops to try py first.
Add Bash(py:*) to settings.local.json allowlist.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

.claude/skills/1password/references/op_commands.md

@@ -154,18 +154,12 @@ op vault list --format=json          # Vaults as JSON
 ## Useful Patterns
 
 ```bash
-# Find item by field value (search)
-op item list --format=json | \
-  python3 -c "import sys,json; [print(i['title']) for i in json.load(sys.stdin)]"
-
-# Export all items in a vault to JSON (backup)
-op item list --vault Dev --format=json | \
-  python3 -c "import sys,json; ids=[i['id'] for i in json.load(sys.stdin)]"
-# (then loop to get each)
+# List item titles
+op item list --format=json | jq -r '.[].title'
 
 # Check if a specific item exists
 op item get "My Item" &>/dev/null && echo "exists" || echo "not found"
 
 # Get item ID (for scripting)
-op item get "My Item" --format=json | python3 -c "import sys,json; print(json.load(sys.stdin)['id'])"
+op item get "My Item" --format=json | jq -r '.id'
 ```

.claude/skills/1password/references/secret_references.md

@@ -102,8 +102,7 @@ op run --env-file=n8n.env.tpl -- docker compose up n8n
 
 ```bash
 # List all fields in an item
-op item get "Item Name" --format=json | \
-  python3 -c "import sys,json; [print(f['label']) for f in json.load(sys.stdin)['fields'] if f.get('value')]"
+op item get "Item Name" --format=json | jq -r '.fields[] | select(.value) | .label'
 
 # Or view interactively
 op item get "Item Name"

.claude/skills/1password/scripts/check_setup.sh

@@ -50,7 +50,7 @@ if op account list &>/dev/null 2>&1; then
   echo ""
   echo "  Vaults:"
   op vault list --format=json 2>/dev/null | \
-    python3 -c "import sys,json; [print(f'    • {v[\"name\"]} ({v[\"id\"]})') for v in json.load(sys.stdin)]" 2>/dev/null || true
+    jq -r '.[] | "    \u2022 \(.name) (\(.id))"' 2>/dev/null || true
 fi
 
 echo ""

.claude/skills/1password/scripts/env_from_op.sh

@@ -42,11 +42,9 @@ fi
 if [[ -z "$ITEM" ]]; then
   echo "Available items in vault '${VAULT:-all vaults}':"
   if [[ -n "$VAULT" ]]; then
-    op item list --vault "$VAULT" --format=json | \
-      python3 -c "import sys,json; [print(f'  {i[\"title\"]}') for i in json.load(sys.stdin)]"
+    op item list --vault "$VAULT" --format=json | jq -r '.[] | "  \(.title)"'
   else
-    op item list --format=json | \
-      python3 -c "import sys,json; [print(f'  [{i[\"vault\"][\"name\"]}] {i[\"title\"]}') for i in json.load(sys.stdin)]"
+    op item list --format=json | jq -r '.[] | "  [\(.vault.name)] \(.title)"'
   fi
   echo ""
   read -rp "Enter item title: " ITEM
@@ -61,11 +59,11 @@ else
   ITEM_JSON=$(op item get "$ITEM" --format=json)
 fi
 
-VAULT_NAME=$(echo "$ITEM_JSON" | python3 -c "import sys,json; d=json.load(sys.stdin); print(d['vault']['name'])")
-ITEM_TITLE=$(echo "$ITEM_JSON" | python3 -c "import sys,json; d=json.load(sys.stdin); print(d['title'])")
+VAULT_NAME=$(echo "$ITEM_JSON" | jq -r '.vault.name')
+ITEM_TITLE=$(echo "$ITEM_JSON" | jq -r '.title')
 
 # Build .env content
-ENV_CONTENT=$(echo "$ITEM_JSON" | python3 - <<'PYEOF'
+ENV_CONTENT=$(echo "$ITEM_JSON" | py - <<'PYEOF'
 import sys, json, re
 
 data = json.load(sys.stdin)

.claude/skills/1password/scripts/store_secret.sh

@@ -78,8 +78,8 @@ else
     "${FIELD}[password]=${VALUE}" \
     --format=json)
 
-  ITEM_ID=$(echo "$RESULT" | python3 -c "import sys,json; print(json.load(sys.stdin)['id'])")
-  VAULT_NAME=$(echo "$RESULT" | python3 -c "import sys,json; print(json.load(sys.stdin)['vault']['name'])")
+  ITEM_ID=$(echo "$RESULT" | jq -r '.id')
+  VAULT_NAME=$(echo "$RESULT" | jq -r '.vault.name')
 
   echo "✅ Created '${TITLE}' (ID: ${ITEM_ID})"
   echo ""

.claude/skills/remediation-tool/scripts/get-token.sh

@@ -96,7 +96,7 @@ fi
 
 if [[ -z "$CLIENT_SECRET" ]]; then
   PYTHON_BIN=""
-  for p in python3 python py; do command -v "$p" >/dev/null 2>&1 && PYTHON_BIN="$p" && break; done
+  for p in py python python3; do command -v "$p" >/dev/null 2>&1 && PYTHON_BIN="$p" && break; done
   [[ -z "$PYTHON_BIN" ]] && { echo "ERROR: vault.sh failed and python unavailable for SOPS fallback" >&2; exit 3; }
   command -v sops >/dev/null 2>&1 || { echo "ERROR: sops not on PATH (needed for fallback decrypt)" >&2; exit 3; }