fix(ledger): live_rows_for called access with nothing in scope (#4208)

Lint caught an F821 that would have been a NameError the first time
`stamps_to_review` was called: `access` is imported locally inside each of the
seven functions in this module that need it — services/access reaches back
here, so a module-level import closes a cycle — and the new function used it
without one.

I wrote the function by pattern-matching its neighbours and did not check what
those neighbours do to make themselves work. Same shape as the tuple unpack
two commits ago (#4207): the mistake is not in the logic I was thinking about,
it is in the surrounding contract I did not read.

Unit and integration were both green on the failing run (7095); only lint was
red. Worth recording because the lane that caught it is the cheapest one and I
had read its command as covering tests — `ruff check src/ scripts/` does not
look at tests/ at all, so a clean test suite says nothing about it.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01821k5B3Ysecp9fNYs92Kuy

src/scribe/services/shape_ledger.py

@@ -444,6 +444,10 @@ async def live_rows_for(user_id: int, project_id: int) -> list[CodeShape]:
     outside (an MCP tool, a route) rather than from a job that already
     established who is asking. Empty for a project the caller cannot read,
     never a partial answer."""
+    # Deferred, like every other access import in this module: services/access
+    # reaches back here, and a module-level import closes the cycle.
+    from scribe.services import access
+
     if not await access.can_read_project(user_id, project_id):
         return []
     return await live_rows(project_id)

tests/test_stamps_to_review.py

@@ -22,8 +22,6 @@ hook's own history is made of.
 """
 
 
-
-
 import pytest
 
 from scribe.services.shape_ledger import (