ci: cache pre-commit environments (NVIDIA#58)

#### Overview

Add CI caching for pre-commit hook environments and update local hooks to use managed pre-commit language environments where applicable. This should reduce repeated hook bootstrap cost in GitHub Actions while keeping cache invalidation tied to the hook config and CI tool versions.

- [x] I confirm this contribution is my own work, or I have the right to submit it under this project's license.
- [x] I searched existing issues and open pull requests, and this does not duplicate existing work.

#### Details

- Set `PRE_COMMIT_HOME` in the reusable Check workflow and cache it with pinned `actions/cache`.
- Key the pre-commit cache by runner OS/arch, CI Python/Node/Rust versions, pre-commit version, and `.pre-commit-config.yaml`.
- Convert local hooks from `system` to the matching managed `python`, `rust`, and `node` pre-commit languages so their environments can be reused.

#### Where should the reviewer start?

Start with `.github/workflows/ci_check.yml` for the cache behavior, then review `.pre-commit-config.yaml` for the hook language changes that make the cache useful.

#### Related Issues: (use one of the action keywords Closes / Fixes / Resolves / Relates to)

- Relates to: none

Signed-off-by: Will Killian <wkillian@nvidia.com>

Author: willkill07

.github/actions/load-ci-tool-versions/action.yml

@@ -20,6 +20,9 @@ outputs:
   uv_version:
     description: uv version
     value: ${{ steps.load.outputs.uv_version }}
+  pre_commit_version:
+    description: pre-commit version
+    value: ${{ steps.load.outputs.pre_commit_version }}
   just_version:
     description: just version
     value: ${{ steps.load.outputs.just_version }}
@@ -55,6 +58,7 @@ runs:
           NEMO_FLOW_CI_RUST_VERSION
           NEMO_FLOW_CI_NODE_VERSION
           NEMO_FLOW_CI_UV_VERSION
+          NEMO_FLOW_CI_PRE_COMMIT_VERSION
           NEMO_FLOW_CI_JUST_VERSION
           NEMO_FLOW_CI_WASM_PACK_VERSION
           NEMO_FLOW_CI_CARGO_LLVM_COV_VERSION
@@ -76,6 +80,7 @@ runs:
           printf 'rust_version=%s\n' "$NEMO_FLOW_CI_RUST_VERSION"
           printf 'node_version=%s\n' "$NEMO_FLOW_CI_NODE_VERSION"
           printf 'uv_version=%s\n' "$NEMO_FLOW_CI_UV_VERSION"
+          printf 'pre_commit_version=%s\n' "$NEMO_FLOW_CI_PRE_COMMIT_VERSION"
           printf 'just_version=%s\n' "$NEMO_FLOW_CI_JUST_VERSION"
           printf 'wasm_pack_version=%s\n' "$NEMO_FLOW_CI_WASM_PACK_VERSION"
           printf 'cargo_llvm_cov_version=%s\n' "$NEMO_FLOW_CI_CARGO_LLVM_COV_VERSION"

.github/ci-tool-versions.env

@@ -6,6 +6,7 @@ NEMO_FLOW_CI_DEFAULT_PYTHON_VER=3.11
 NEMO_FLOW_CI_RUST_VERSION=1.93.0
 NEMO_FLOW_CI_NODE_VERSION=24
 NEMO_FLOW_CI_UV_VERSION=0.9.28
+NEMO_FLOW_CI_PRE_COMMIT_VERSION=4.5
 NEMO_FLOW_CI_JUST_VERSION=1.47.1
 NEMO_FLOW_CI_WASM_PACK_VERSION=0.14.0
 NEMO_FLOW_CI_CARGO_LLVM_COV_VERSION=0.8.5

.github/workflows/ci_check.yml

@@ -89,16 +89,26 @@ jobs:
         with:
           tool: cargo-about@${{ steps.ci-config.outputs.cargo_about_version }}
 
+      - name: Cache pre-commit environments
+        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
+        with:
+          path: ${{ runner.temp }}/.cache/pre-commit
+          key: >-
+            nemo-flow-pre-commit-${{ runner.os }}-${{ runner.arch }}-py${{ steps.ci-config.outputs.default_python_version }}-node${{ steps.ci-config.outputs.node_version }}-rust${{ steps.ci-config.outputs.rust_version }}-pc${{ steps.ci-config.outputs.pre_commit_version }}-${{ hashFiles('.pre-commit-config.yaml') }}
+          restore-keys: |
+            nemo-flow-pre-commit-${{ runner.os }}-${{ runner.arch }}-py${{ steps.ci-config.outputs.default_python_version }}-node${{ steps.ci-config.outputs.node_version }}-rust${{ steps.ci-config.outputs.rust_version }}-pc${{ steps.ci-config.outputs.pre_commit_version }}-
+
       - name: pre-commit
         working-directory: ${{ env.NEMO_FLOW_CI_WORKSPACE }}
         env:
           FULL_CI: ${{ inputs.full_ci }}
           PRE_COMMIT_BASE: ${{ inputs.base }}
+          PRE_COMMIT_HOME: ${{ runner.temp }}/.cache/pre-commit
           # The attribution hook syncs docs deps; do not apply repo warning policy to third-party Rust builds.
           RUSTFLAGS: ""
         run: |
           set -e
-          uv tool install pre-commit==4.5
+          uv tool install pre-commit==${{ steps.ci-config.outputs.pre_commit_version }}
           if [[ "$FULL_CI" == "true" || -z "$PRE_COMMIT_BASE" ]]; then
             pre-commit run --all-files --show-diff-on-failure
           else