fix: reorder imports and use ty-compatible type suppression

src/porchlight/app.py

@@ -110,16 +110,16 @@ def create_app(settings: Settings | None = None) -> FastAPI:
     # Session middleware
     session_secret = settings.session_secret or secrets.token_hex(32)
     app.add_middleware(
-        CSRFMiddleware,
+        CSRFMiddleware,  # ty: ignore[invalid-argument-type]
         exempt_paths={"/token", "/userinfo"},
         check_origin=settings.issuer,
     )
     app.add_middleware(
-        SessionMiddleware,
+        SessionMiddleware,  # ty: ignore[invalid-argument-type]
         secret_key=session_secret,
         same_site="lax",
         https_only=settings.session_https_only,
-    )  # type: ignore[arg-type]
+    )
 
     # Templates
     templates = Jinja2Templates(directory=str(PACKAGE_DIR / "templates"))