cli: Trim two lines from the early record gate

Reassign the expected_fingerprint argument instead of copying it into a
local, and give existing_secret its None default before the source
checks instead of in an else branch.

Behavior is unchanged. The installed package drops from 5161 to 5159
logical review lines, which keeps the integrated #7/#42/#57/#46/#80/#81
tip under the <5200 budget.

Security: the record gate still runs before any card is generated or
shown, and interrupts at that gate still raise _WalletSetupInterrupted.

Validation: ruff check, ruff format --check, mypy src/codex32, and
pytest (918 passed, with and without -O).

Refs #81, #38.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_018az69UX4773mYohXAtE8kD

Author: claude

src/codex32/cli.py

@@ -401,16 +401,15 @@ def _initialize_wallet(
     try:
         if confirmed:
             _print("Master-seed backup confirmed.\n", err=True)
-        expected = expected_fingerprint
         if restore and not identity_checked:
-            expected = _recorded_fingerprint(core, secret)
+            expected_fingerprint = _recorded_fingerprint(core, secret)
         if not restore:
             _show_fingerprint(core, secret, "Write it on the wallet record")
         name = core.initialize(
             secret,
             lambda prompt: _text(prompt, optional=True),
             lambda message: _print(message, err=True),
-            expected_fingerprint=expected,
+            expected_fingerprint=expected_fingerprint,
             account=account,
             timestamp=timestamp,
         )
@@ -496,6 +495,7 @@ def _create(
     if isinstance(source, (Share, Secret)) and not isinstance(source, MasterSeed):
         raise _UsageError(f"Enter one {_profile_rules(profile).label}, not a share or another backup type.")
     try:
+        existing_secret: MasterSeed | None = None
         if isinstance(source, MasterSeed):
             if threshold == 0 and identifier is not None and identifier != source.header.identifier:
                 raise _UsageError(
@@ -504,8 +504,6 @@ def _create(
             existing_secret = source
         elif source is not None:
             existing_secret = _generated_secret(source, None, identifier, core.fingerprint_seed)
-        else:
-            existing_secret = None
         try:
             expected = _recorded_fingerprint(core, existing_secret) if existing_secret is not None else None
         except (EOFError, KeyboardInterrupt) as error: