Tooling Updates

[bmos]

• Since the ruff, bandit, etc jobs all use the tool names, I renamed the job "test" to "pytest".
• Bumped ruff to latest version in requirements and pre-commit
• Renamed the circleci docs build workflow to docs-build instead of just build so it was obvious what it does.
• Exposed uv pip install --resolution flag to the pytest job matrix to simplify testing with older dependency versions, although this is not included in the github actions workflow. This also makes workflow logs more readable!
• Added caching to most tooling runs in python checks
• Added SARIF upload to some additional tooling so it's more obvious what needs to be fixed
• Set bandit to use medium/medium instead of high/high severity and confidence

[github-actions]

Coverage report

This PR does not seem to contain any modification to coverable code.

[github-advanced-security]

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.