gifn-apply: use Ruff 0.1.13, disable some subprocess checks

We try to be responsible in our command invocation.

Also, drop the PLE1205 override: it does seem to have been a false
positive fixed in a later version of Ruff.

Ruff: S603,S607
Change-Id: I356cc28b53e503a0e7c898e5a5b8e549621ac479
diff --git a/tools/git-if-needed/python/gifn_apply/gifn.py b/tools/git-if-needed/python/gifn_apply/gifn.py
index 3e313a8..b17cd76 100644
--- a/tools/git-if-needed/python/gifn_apply/gifn.py
+++ b/tools/git-if-needed/python/gifn_apply/gifn.py
@@ -21,6 +21,6 @@
     cmdstr = shlex.join(str(arg) for arg in cmd)
     cfg.log.debug("Running `%(cmdstr)s`", {"cmdstr": cmdstr})
     try:
-        subprocess.run(cmd, check=True, cwd=tempd, shell=False)
+        subprocess.run(cmd, check=True, cwd=tempd, shell=False)  # noqa: S603
     except (OSError, subprocess.CalledProcessError) as err:
         raise defs.GApplyError(f"Could not run `{cmdstr}` in {tempd}: {err}") from err