CI: Lint and test via uv

[hugovk]

Like python/blurb#32.

Tests:

• No cache: 2m 29s -> 1m 57s

• With cache: 2m 15s -> 1m 58s

Lint:

• We had a pre-commit config file but weren't running on the CI before. Let's add it.

Also:

• Fix https://github.com/woodruffw/zizmor findings (the persist-credentials: false).

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 100.00%. Comparing base (25f1059) to head (6486da8).
Report is 1 commits behind head on main.

@@            Coverage Diff            @@
##              main      #652   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files           18        18           
  Lines         2149      2149           
  Branches        97        97           
=========================================
  Hits          2149      2149           

Flag	Coverage Δ
Python_3.10.15	100.00% <ø> (ø)
Python_3.11.10	?
Python_3.12.7	?
Python_3.13.0	100.00% <ø> (ø)
Python_3.9.20	?

Flags with carried forward coverage won't be shown. Click here to find out more.