Extend uv exclude-newer supply-chain guard to remaining pyproject.toml (#24337)

## Summary
- Adds `exclude-newer = "48h"` to the `[tool.uv]` block of every
pyproject.toml backing one of our `uv.lock` files that didn't already
have it (root workspace, several `python_modules/*`,
`services/validating-admission-webhook`,
`public/skills/dagster-skills-evals`,
`dagster-cloud/python_modules/dagster-cloud-datahub`).
- The cutoff is recomputed each time `uv lock` runs, so it rolls forward
automatically; values already frozen into existing `uv.lock` files are
untouched until next regeneration.
- `dagster-oss/` and its example subprojects intentionally skipped

## Test plan
- [ ] CI lint/format checks pass
- [ ] Spot-check next `just rebuild_uv_lock_file` reflects the new
cutoff

🤖 Generated with [Claude Code](https://claude.com/claude-code)

---------

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Internal-RevId: c7c56192ea70a583ed0229aa3720d7ec8e4fc924

Author: 2 people

dagster-skills-evals/pyproject.toml

@@ -86,3 +86,6 @@ ignore = [
 
 [tool.ruff.lint.isort]
 known-first-party = ["dagster_skills_evals"]
+
+[tool.uv]
+exclude-newer = "48h"