feat: add uv-version parameter to security-updates action (#10)

Allow callers to pin the uv version installed by the composite action,
matching the parameter already available in the reusable workflow.

https://claude.ai/code/session_01HaMBVq6NwapAMcNxsSF1uj

Co-authored-by: Claude <noreply@anthropic.com>

Author: albertotb

security-updates/action.yml

@@ -20,6 +20,10 @@ inputs:
     description: Title for the PR
     required: false
     default: "security: upgrade vulnerable dependencies"
+  uv-version:
+    description: uv version to install
+    required: false
+    default: latest
 
 runs:
   using: composite
@@ -30,6 +34,8 @@ runs:
         client-id: ${{ inputs.app-id }}
         private-key: ${{ inputs.private-key }}
     - uses: astral-sh/setup-uv@v7
+      with:
+        version: ${{ inputs.uv-version }}
     - name: Configure git with app token
       shell: bash
       run: |