Switch dvc-data from git pin to PyPI >=3.18.3

Upstream merged our fix (treeverse/dvc-data#656) and released 3.18.3.
Drop the git direct reference and `allow-direct-references` hatch config.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

Author: ryan-williams

pyproject.toml

@@ -28,7 +28,7 @@ dependencies = [
     "click>=8.0",
     "dffs>=0.1.1",
     "dvc>=3.50",
-    "dvc-data @ git+https://github.com/runsascoded/dvc-data.git@9956cd7539d232ff711b14a623170f1a9629ff9a",
+    "dvc-data>=3.18.3",
 ]
 
 [project.optional-dependencies]
@@ -67,9 +67,6 @@ dvx = "dvx.cli:main"
 Homepage = "https://github.com/runsascoded/dvx"
 Repository = "https://github.com/runsascoded/dvx"
 
-[tool.hatch.metadata]
-allow-direct-references = true
-
 [tool.hatch.version]
 source = "vcs"