perf(deps): update ghcr.io/astral-sh/uv docker tag to v0.9.20 (#351)

This PR contains the following updates:

| Package | Type | Update | Change | OpenSSF |
|---|---|---|---|---|
| [ghcr.io/astral-sh/uv](https://redirect.github.com/astral-sh/uv) |
final | patch | `0.9.18` -> `0.9.20` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/astral-sh/uv/badge)](https://securityscorecards.dev/viewer/?uri=github.com/astral-sh/uv)
|

---

### Release Notes

<details>
<summary>astral-sh/uv (ghcr.io/astral-sh/uv)</summary>

###
[`v0.9.20`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0920)

Released on 2025-12-29.

This is a re-release of 0.9.20, with internal crate versions incremented
to enable publishing to crates.io.

###
[`v0.9.19`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0919)

Released on 2025-12-29.

##### Python

- Add CPython 3.15.0a3
([#&#8203;17165](https://redirect.github.com/astral-sh/uv/pull/17165))

##### Enhancements

- Allow `uv pip compile` to install missing python interpreters in cases
where it would otherwise fail
([#&#8203;17216](https://redirect.github.com/astral-sh/uv/pull/17216))
- Avoid creating file contents with `uv init --bare --script`
([#&#8203;17162](https://redirect.github.com/astral-sh/uv/pull/17162))
- Respect `--torch-backend` in `uv tool` commands
([#&#8203;17117](https://redirect.github.com/astral-sh/uv/pull/17117))
- Support comma-separated values in `--no-binary` and `--only-binary`
([#&#8203;17185](https://redirect.github.com/astral-sh/uv/pull/17185))

##### Preview features

- Summarize package changes in `uv sync` with JSON output format
([#&#8203;16981](https://redirect.github.com/astral-sh/uv/pull/16981))

##### Performance

- Avoid two hot `String` allocations in deserialization
([#&#8203;17221](https://redirect.github.com/astral-sh/uv/pull/17221))
- Cache NVIDIA-hosted wheels by default
([#&#8203;17164](https://redirect.github.com/astral-sh/uv/pull/17164))

##### Bug fixes

- Avoid enforcing incorrect hash in mixed-hash settings
([#&#8203;17157](https://redirect.github.com/astral-sh/uv/pull/17157))
- Fix retry counts in cached client
([#&#8203;17104](https://redirect.github.com/astral-sh/uv/pull/17104))
- Respect `UV_PYTHON_DOWNLOAD_MIRROR` in `uv python list`
([#&#8203;16673](https://redirect.github.com/astral-sh/uv/pull/16673))
- Support remote `pylock.toml` files
([#&#8203;17119](https://redirect.github.com/astral-sh/uv/pull/17119))
- Avoid flagging proxied Git URLs as ambiguous authority
([#&#8203;17234](https://redirect.github.com/astral-sh/uv/pull/17234))
- Fix dropped support of `-` in pip constraints, overrides, and excludes
([#&#8203;17188](https://redirect.github.com/astral-sh/uv/pull/17188))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Only on Sunday and Saturday ( * * * * 0,6 ) in timezone
Europe/Dublin.

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/BSStudio/bss-web-file-api).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi41OS4wIiwidXBkYXRlZEluVmVyIjoiNDIuNTkuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Author: renovate[bot]

Dockerfile

@@ -2,7 +2,7 @@ FROM python:3.14.2-alpine@sha256:7af51ebeb83610fb69d633d5c61a2efb87efa4caf66b598
 
 FROM python AS builder
 
-COPY --from=ghcr.io/astral-sh/uv:0.9.18@sha256:5713fa8217f92b80223bc83aac7db36ec80a84437dbc0d04bbc659cae030d8c9 /uv /uvx /bin/
+COPY --from=ghcr.io/astral-sh/uv:0.9.20@sha256:81f1a183fbdd9cec1498b066a32f0da043d4a9dda12b8372c7bfd183665e485d /uv /uvx /bin/
 
 ENV UV_LINK_MODE=copy \
     UV_COMPILE_BYTECODE=1 \