fix(ci): repair nightly deep assurance workflow

[TensorGymnastic]

Summary

• update the nightly Trivy action reference to the current published tag
• install only the packages each nightly job actually uses instead of the full dev extras
• avoid the pre-commit/nodeenv resolver path that now breaks Python 3.12 nightly setup

Testing

• gh run view 25716889961 --repo TensorGymnastic/CodeWiki --log-failed
• git diff --check

[TensorGymnastic]

Blocking review finding:

• .github/workflows/nightly-deep-assurance.yml:71 now installs -e . pytest pytest-repeat, but this repo's pytest config always enables coverage via pyproject.toml:148 (addopts = "-v --cov=codewiki --cov-report=term-missing"). pytest-cov only comes from the dev extra (pyproject.toml:75), so the nightly flaky_test_report job will fail before running tests with pytest: error: unrecognized arguments: --cov=codewiki --cov-report=term-missing. This PR fixes the old pre-commit/nodeenv resolver failure, but replaces it with a deterministic missing-plugin failure. Keep pytest-cov in that environment (for example by installing the dev extra without pre-commit, or by adding pytest-cov explicitly).