Disable uv cache to prevent cache poisoning

A malicious PR could poison the uv cache and affect
subsequent runs. Disable caching on both the test and
release jobs — the ~10s install time is not worth the
attack surface.

Author: bschwedler

.github/workflows/ci.yml

@@ -86,6 +86,7 @@ jobs:
         uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78  # v7.6.0
         with:
           python-version-file: "posit-bakery/pyproject.toml"
+          enable-cache: false
 
       - name: Install dependencies
         working-directory: ./posit-bakery
@@ -228,6 +229,7 @@ jobs:
         uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78  # v7.6.0
         with:
           python-version-file: "posit-bakery/pyproject.toml"
+          enable-cache: false
 
       - name: Install dependencies
         working-directory: ./posit-bakery