[stiermid]

Summary

Update the uv pre-commit hook and the Bun-update workflow's explicit uv pin together, from 0.11.19 to 0.13.5. Exactly two version lines change.

The existing workflow comment requires these versions to match to avoid lockfile-format churn. #22 updates only the hook, so this integration PR supplies the atomic replacement; leave #22 open until this PR is reviewed and integrated.

uv 0.13.5 also includes the 0.13.4 fix for the compromised emSign trust root (GHSA-hq85-5cpj-mr62) in these two tool installations. The separately locked Hatch uv dependency is not changed here.

Validation

• Both YAML files parse and both pins equal 0.13.5.
• The uv 0.13.5 hook command (uv lock) leaves the current uv.lock byte-for-byte unchanged.
• Reviewed uv 0.12/0.13 breaking changes; the project retains its existing Hatchling backend and Python settings.
• Wheel build succeeds; all 118 local tests pass, including bundled-Bun smoke tests.

Awaiting maintainer review; do not auto-merge. No changes to Dependabot configuration or automation behavior.