Move CI to setup-uv v10.2.0 and uv 0.12.17 (#91)

## Summary

Part of the 2026-09-21 dependency sweep. The `astral-sh/setup-uv` action
moves from v10.1.0 to v10.2.0, and the uv `version:` input it installs
moves from 0.12.16 to 0.12.17 in `ci.yml`, `publish.yml` and
`security.yml`. Dependabot cannot see that input, so it moves by hand.
The lockfile is already current (`uv lock --upgrade --dry-run` reports
no changes), and OSV over `uv.lock` finds no issues.

Worked with: Varun. Not done: no version bump or release, since nothing
that ships in the package changed.

## Type of change

- [ ] Bug fix (no breaking change)
- [ ] New feature (no breaking change)
- [ ] Breaking change (existing callers must update)
- [x] Docs, tests, or internal maintenance only

## Public API

Unchanged.

## Test plan

CI on this PR is the test: every job installs uv through the bumped
action and input.

## Checklist

- [ ] Tests cover the new behavior, and the suite passes locally (not
applicable: workflow pins only; CI is the gate)
- [x] Lint, format, and type checks pass (run by CI on this PR)
- [x] Docs and README examples updated if the public surface changed (no
public surface change)
- [x] No secrets, credentials, or personal data in the diff or the tests

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>

Author: vvillait88

.github/workflows/ci.yml

@@ -20,9 +20,9 @@ jobs:
     timeout-minutes: 10
     steps:
       - uses: useblacksmith/checkout@v1
-      - uses: astral-sh/setup-uv@v10.1.0
+      - uses: astral-sh/setup-uv@v10.2.0
         with:
-          version: "0.12.16"
+          version: "0.12.17"
       - run: uv python install 3.12
       - uses: actions/cache@v6
         with:

.github/workflows/publish.yml

@@ -19,9 +19,9 @@ jobs:
     steps:
       - uses: actions/checkout@v7
 
-      - uses: astral-sh/setup-uv@v10.1.0
+      - uses: astral-sh/setup-uv@v10.2.0
         with:
-          version: "0.12.16"
+          version: "0.12.17"
 
       - name: Set version from tag
         run: sed -i "s/^version = .*/version = \"${GITHUB_REF_NAME#v}\"/" pyproject.toml

.github/workflows/security.yml

@@ -36,9 +36,9 @@ jobs:
     timeout-minutes: 5
     steps:
       - uses: useblacksmith/checkout@v1
-      - uses: astral-sh/setup-uv@v10.1.0
+      - uses: astral-sh/setup-uv@v10.2.0
         with:
-          version: "0.12.16"
+          version: "0.12.17"
       - uses: actions/setup-python@v7
         with:
           python-version: "3.13"