[flake8-bandit] Clarify the supported hashing functions (S324)

[danparizher]

Summary

Fixes #16572

[github-actions]

ruff-ecosystem results

Linter (stable)

✅ ecosystem check detected no linter changes.

Linter (preview)

✅ ecosystem check detected no linter changes.

[ntBre]

Thanks for working on this, and I think it's nice to have some note like this, but it doesn't seem exactly accurate to say that we support the values in algorithms_guaranteed. I checked all the versions supported by uv (3.7 through 3.14), and sha and md4 haven't been guaranteed algorithms at least since 3.7. I also checked in the CPython source as far back as 3.2, when the constant was added.

I was able to call hashlib.new("md4") on 3.7, but sha didn't work on any version I tested.

Fortunately, I think we can just drop the reference to algorithms_guaranteed and the note still reads well. Since we're effectively enumerating every function checked by the rule, it might make sense to mention the crypt functions (crypt and mksalt) as well.

[danparizher]

Thanks for checking, that makes sense. I changed it to explicitly list what the rule actually targets, plus crypt.crypt and crypt.mksalt when used with the weak methods (METHOD_CRYPT, METHOD_MD5, METHOD_BLOWFISH)

[ntBre]

Thank you! I just made one suggestion to restore the reference link. Even if we're not checking that list directly, I think the link could still be helpful.