chore(ci): move setup-uv to v10.3.3 (#292)

## Summary

Moves `astral-sh/setup-uv` from v9.0.0 to v10.3.3, pinned by SHA, to
harden CI tool download verification. Part of the fleet-wide pass that
starts with the backend:
RoboFinSystems/robosystems#1974

## Changes

- **`create-release.yml`, `test.yml`:** all `setup-uv` uses move to
v10.3.3. Inputs are unchanged.
- **`dependabot.yml`:** removes the `setup-uv` major ignore, whose note
said to move in step with the backend.

## Compatibility

None. CI only: no SDK code, generated surface or published package
contents change. `create-release.yml` uses the new version from the next
release.

## Testing

- `actionlint` on the workflows: passed.
- This PR's CI exercises the new version wherever `test.yml` uses it.
Scheduled and release workflows run it for the first time on their next
run.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Author: jfrench9

.github/dependabot.yml

@@ -29,16 +29,3 @@ updates:
         update-types:
           - 'minor'
           - 'patch'
-    ignore:
-      # Held across the fleet: the robosystems backend pins v8.3.2 and ignores
-      # majors because v9 flipped `prune-cache` to false and would grow its uv
-      # cache. This repo sits on v9.0.0 and stays there — it is pinned by SHA
-      # now, and neither v9's nor v10's breaking change actually bites here
-      # (no workflow triggers on release, pull_request_target or workflow_run,
-      # which is the only surface v10's cache guard touches). Downgrading to
-      # match the backend's exact pin would be churn for no security gain, so
-      # what is shared is the rule, not the version. Drop this entry when the
-      # backend takes a setup-uv major, and move in step with it.
-      - dependency-name: 'astral-sh/setup-uv'
-        update-types:
-          - 'version-update:semver-major'

.github/workflows/create-release.yml

@@ -37,7 +37,7 @@ jobs:
           python-version: "3.14"
 
       - name: Install uv
-        uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
+        uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
 
       - name: Get current version
         id: current-version

.github/workflows/test.yml

@@ -26,7 +26,7 @@ jobs:
           python-version: ${{ matrix.python-version }}
 
       - name: Install uv
-        uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
+        uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
 
       - name: Install dependencies
         run: |