chore: unblock pyright for pre-commit hook

simple_salesforce has tightened its __all__ exports, so reading
Salesforce/OrderedDict via the top-level namespace now trips pyright's
reportPrivateImportUsage. Switch to the canonical submodule imports
(simple_salesforce.api) and a setattr() monkey-patch that pyright
doesn't flag.

Also pin the pyright version in the pre-commit hook so node-side
version drift can't silently reintroduce the same class of failure.

Author: jstvz

.pre-commit-config.yaml

@@ -35,4 +35,4 @@ repos:
             types: [python]
             pass_filenames: false
             additional_dependencies:
-                - pyright
+                - pyright@1.1.408

cumulusci/__init__.py

@@ -14,5 +14,5 @@
 if sys.version_info < (3, 8):  # pragma: no cover
     raise Exception("CumulusCI requires Python 3.8+.")
 
-api.OrderedDict = dict
-bulk.OrderedDict = dict
+setattr(api, "OrderedDict", dict)
+setattr(bulk, "OrderedDict", dict)

cumulusci/utils/salesforce/count_sobjects.py

@@ -1,6 +1,6 @@
 import typing as T
 
-from simple_salesforce import Salesforce
+from simple_salesforce.api import Salesforce
 
 from cumulusci.utils.http.multi_request import CompositeParallelSalesforce
 from cumulusci.utils.iterators import partition