feat: upgrade UV integration

• allow version bumping via uv version (with fallback to previous method)
• trivy can manage uv.lock

runned pipeline:

• bump uv
• bump fallback
• trivy