CI: Lint and test via uv

[hugovk]

• Lint with action-pre-commit-uv (60s -> 40s)
• Test with tox-uv (120s -> 80s)

Lint

• No cache: 60s -> 37s

• With cache: 11s -> 11s

Test

• No cache: 2m 0s -> 1m 26s

• With cache: 1m 58s -> 1m 22s

---

Also:

• Fix security issues found by https://github.com/woodruffw/zizmor
• No need for with: attestations: true, it's now the default: https://github.com/pypa/gh-action-pypi-publish/releases/tag/v1.11.0