ci: single-source the Python version via pyproject.toml + add uv-lock pre-commit hook

ci: single-source the Python version via pyproject.toml + add uv-lock pre-commit hook #3656