Type-check the package under mypy --strict

Package is now 100% type-checked under mypy --strict with checks wired into pre-commit and CI to prevent regression.