ci: install locked dependency universe in all workflows (uv sync --locked)

Root cause of the simultaneous lane-shas failures on PRs #46 and #47:
workflows installed with unlocked 'uv pip install -e .' against floor-only
specs (numpy>=1.26, ...) while the repo maintains uv.lock — so a PyPI
release landing between runs shifts the runner's resolved set, and the
byte-exact lane SHA pins move with it. Timeline: main lane run green at
23:40Z, both PR runs (diffs no lane executes) red after 00:02Z; the
identical trees verify 9/9 locally against the locked venv, and
'uv lock --check' is clean.

All six workflows now 'uv sync --locked' (--extra dev where [dev] was
installed) — CI tests the locked universe, so lane pins can only move when
code moves. Locked-sync also fails loudly on a stale lock instead of
silently resolving fresh.

Self-validating: this PR's own lane-shas run uses this branch's workflow.

[Verification]: smoke suite passed locally (175 passed); lane repro on the
failing PRs' tree: 9/9 pinned SHAs; uv lock --check clean.

.github/workflows/contemplation.yml

@@ -44,7 +44,7 @@ jobs:
           enable-cache: true
 
       - name: install dependencies
-        run: uv pip install -e ".[dev]" pyyaml
+        run: uv sync --locked --extra dev
 
       - name: run contemplation cycle
         id: run

.github/workflows/full-pytest.yml

@@ -53,7 +53,7 @@ jobs:
 
       - name: install dependencies
         run: |
-          uv pip install -e ".[dev]" pyyaml
+          uv sync --locked --extra dev
 
       - name: pytest (parallel, quarantine and slow excluded)
         env:

.github/workflows/lane-shas.yml

@@ -81,7 +81,7 @@ jobs:
       - name: install dependencies
         if: steps.paths.outputs.run == 'true'
         run: |
-          uv pip install -e . pyyaml pytest
+          uv sync --locked
 
       - name: verify lane SHAs
         if: steps.paths.outputs.run == 'true'

.github/workflows/nightly-full-pytest.yml

@@ -50,7 +50,7 @@ jobs:
 
       - name: install dependencies
         run: |
-          uv pip install -e ".[dev]" pyyaml
+          uv sync --locked --extra dev
 
       - name: pytest (parallel, full suite, quarantine excluded)
         env:

.github/workflows/ratify-proposal.yml

@@ -70,7 +70,7 @@ jobs:
           enable-cache: true
 
       - name: install dependencies
-        run: uv pip install -e ".[dev]"
+        run: uv sync --locked --extra dev
 
       - name: resolve review date
         id: date

.github/workflows/smoke.yml

@@ -43,7 +43,7 @@ jobs:
 
       - name: install dependencies
         run: |
-          uv pip install -e ".[dev]" pyyaml
+          uv sync --locked --extra dev
 
       - name: pytest smoke suite
         env: