fix: add uv dependency audit

[qartik]

Summary

• add uv audit --locked via make audit and run it before uv sync in CI
• configure uv with a 7-day exclude-newer cooldown and document local audit usage
• modernize project checks from pre-commit/mypy to prek/ty
• remove the scheduled pre-commit auto-update workflow

Fixes #312

Validation

• make audit
• make lint
• make tests

[Copilot]

Pull request overview

This PR adds dependency vulnerability scanning via uv audit --locked to the project and CI, while also updating the developer tooling stack (switching from pre-commit/mypy to prek/ty) and removing now-obsolete mypy configuration.

Changes:

• Add make audit (backed by uv audit --locked) and run it in CI before dependency sync.
• Configure uv with a 7-day exclude-newer window and document local audit usage.
• Replace mypy-based type-checking configuration with ty, and switch CI/lint commands from pre-commit to prek.

Reviewed changes

Copilot reviewed 18 out of 19 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
tests/test_wasm.py	Remove per-file mypy error-code disable directive.
tests/test_phirgen.py	Remove per-file mypy error-code disable directive.
tests/test_parallelization.py	Remove per-file mypy error-code disable directive.
tests/test_parallel_tk2.py	Remove per-file mypy error-code disable directive.
tests/test_api.py	Remove per-file mypy error-code disable directive.
README.md	Update dev setup to use prek; document dependency audit usage.
pytket/phir/sharding/sharder.py	Simplify Bit extraction from command args; remove type-ignore.
pytket/phir/phirgen.py	Remove per-file mypy error-code disable directive.
pytket/phir/phirgen_parallel.py	Add AngleKey type alias to better type dict keys for angle grouping.
pytket/phir/cli.py	Remove per-file mypy disable directive.
pytket/phir/api.py	Remove per-file mypy error-code disable directive.
pyproject.toml	Add prek/ty dev deps; configure uv exclude-newer; add ty config.
mypy.ini	Remove mypy configuration file.
MANIFEST.in	Stop including/excluding removed mypy.ini.
Makefile	Switch install/dev flows to uv sync; add audit target; use prek for lint.
.pre-commit-config.yaml	Bump hook revs; replace mypy hook with local ty hook.
.github/workflows/python-app.yml	Run dependency audit step before uv sync; use prek in CI.
.github/workflows/pre-commit-au.yml	Remove scheduled pre-commit auto-update workflow.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.