refactor: remove db.commit() from business services, callers use UnitOfWork (Tier 3)

backend/app/routers/scores.py

@@ -11,6 +11,7 @@ from sqlalchemy.orm import Session
 
 from app.database import get_db
 from app.dependencies.auth import get_current_user, require_role
+from app.domain.unit_of_work import UnitOfWork
 from app.models.user import User
 from app.services.scoring_service import (
     score_technique_by_mitre_id,
@@ -127,14 +128,16 @@ def update_scoring_config(
     Weights are persisted in the database and survive restarts.
     Validation enforces that all weights are non-negative and sum to 100.
     """
-    result = update_scoring_weights(
-        db,
-        tests=payload.tests,
-        detection_rules=payload.detection_rules,
-        d3fend=payload.d3fend,
-        freshness=payload.freshness,
-        platform_diversity=payload.platform_diversity,
-    )
+    with UnitOfWork(db) as uow:
+        result = update_scoring_weights(
+            db,
+            tests=payload.tests,
+            detection_rules=payload.detection_rules,
+            d3fend=payload.d3fend,
+            freshness=payload.freshness,
+            platform_diversity=payload.platform_diversity,
+        )
+        uow.commit()
 
     from app.services.score_cache import invalidate
     invalidate()