uv

e42adccc - Pin uv in privileged workflows (#21317)

Pin uv in privileged workflows (#21317) `setup-uv` falls back to installing an artifact without checksum verification when the selected version is absent from its bundled checksum table. The release and automation workflows currently resolve `latest` or rely on default resolution in jobs with publishing or repository authority, allowing `versions/main` to select an unverified executable. Pin those installs to explicit uv versions and the checksums of their immutable x86-64 Linux release assets. This preserves the existing release behavior while preventing a manifest change from substituting the executable used by credentialed jobs. --------- Co-authored-by: Zanie Blue <contact@zanie.dev>