style: fix import ordering in token_usage_middleware

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>

Author: crivetimihai

mcpgateway/middleware/token_usage_middleware.py

@@ -188,9 +188,12 @@ async def send_wrapper(message: dict) -> None:
                 # Without this check, an attacker can craft a JWT with fake
                 # jti/sub and auth_provider=api_token to pollute usage logs.
                 try:
-                    from mcpgateway.db import EmailApiToken  # pylint: disable=import-outside-toplevel
+                    # Third-Party
                     from sqlalchemy import select  # pylint: disable=import-outside-toplevel
 
+                    # First-Party
+                    from mcpgateway.db import EmailApiToken  # pylint: disable=import-outside-toplevel
+
                     with fresh_db_session() as verify_db:
                         exists = verify_db.execute(select(EmailApiToken.id).where(EmailApiToken.jti == jti)).scalar_one_or_none()
                         if exists is None: