MAINT: upgrade lock files

[dependabot]

Upgrades pinned versions across uv.lock, pre-commit hooks, and GitHub Actions workflows, and adjusts repository configuration to stay consistent with the new tool versions.

• Pins ComPWA/actions workflows and release-drafter/release-drafter to commit SHAs (with the resolved version in a trailing comment) instead of mutable tags, following the org's pinning convention.
• Bumps pre-commit hook revisions: ComPWA/policy 0.9.0 → 0.9.7, ComPWA/nbhooks 0.0.1 → 0.0.2, ruff-pre-commit v0.15.21 → v0.16.6, tombi-pre-commit v1.2.0 → v1.5.4, check-jsonschema 0.37.4 → 0.38.0, cspell-cli v10.0.1 → v10.2.0 (drops the now-unneeded pinned language_version), editorconfig-checker 3.6.1 → 3.11.1, ty-pre-commit v0.0.59 → v0.0.80, and uv-pre-commit 0.11.28 → 0.12.12.
• Updates the tombi schema URL to match the new ComPWA/policy release.
• Adds new Ruff rule codes to the ignore lists in pyproject.toml to match the rules introduced by the Ruff upgrade.
• Ignores local agent configuration files and directories (.agents/, .claude/, .codex/, .gemini/, AGENTS.md, CLAUDE.md, GEMINI.md) in .gitignore.
• Removes the obsolete https://via.placeholder.com link-check exception from docs/conf.py, since the service no longer needs the workaround.

Validation

• poe style passes with the upgraded hook versions.