chore: Refresh uv.lock to include skypilot extras and bump exclude-newer window (#244)

The previous lockfile was missing the skypilot optional dependency group
(53 packages) and its exclude-newer timestamp had drifted outside the
rolling P7D window, both of which break uv sync --locked --all-extras
in CI.

Regenerated against public PyPI with UV_CONFIG_FILE=/dev/null to avoid
picking up the user-level extra-index-url pointing at Shopify's internal
mirror.

Author: Volv-G