build: Track uv.lock for reproducible dev environments

Contributors running `uv sync` now get byte-identical dependency
resolutions instead of floating inside the floors declared in
pyproject.toml. End users install via HACS and don't see this file.

Author: steynovich