CI: Lint and test via uv

[hugovk]

Like python/blurb#32.

Tests:

• No cache: 2m 29s -> 1m 57s

• With cache: 2m 15s -> 1m 58s

Lint:

• We had a pre-commit config file but weren't running on the CI before. Let's add it.

Also:

• Fix https://github.com/woodruffw/zizmor findings (the persist-credentials: false).

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 100.00%. Comparing base (25f1059) to head (6486da8).
Report is 1 commits behind head on main.

@@ Coverage Diff @@## main #652 +/- ##
=========================================
Coverage 100.00% 100.00% =========================================
Files 18 18 Lines 2149 2149 Branches 97 97 =========================================
Hits 2149 2149 

Flag	Coverage Δ
Python_3.10.15	100.00% <ø> (ø)
Python_3.11.10	?
Python_3.12.7	?
Python_3.13.0	100.00% <ø> (ø)
Python_3.9.20	?

Flags with carried forward coverage won't be shown. Click here to find out more.