build: add portable TestQL dependency lock

[tom-sapletta-com]

Ticket: ticket-004

Adds a uv.lock resolved with uv lock --no-sources, so external Docker consumers use registry artifacts rather than the developer-relative vdisplay override.

Related: #10
Related: semcod/koru#64

[ifuri-validator-agent]

Deterministic Validator approval for exact head 0c8faed91ee8210a1759926a61fcee28f67c025e.

Ticket: ticket-004
Correlation ID: testql-pr-13-ticket-004
Model: zai/glm-5.3
Advisory LLM review: LLM_UNAVAILABLE
Reason: advisory_review_budget_exceeded: full review requires 50 chunks; limit is 8
This approval rests on the deterministic checks alone; no advisory opinion was recorded for this head.
Merge will be attempted after this approval when explicitly authorized.

Decision record (recomputable)

DECISION D-004-8079
TICKET ticket-004
HEAD_SHA 0c8faed91ee8210a1759926a61fcee28f67c025e
CORRELATION_ID testql-pr-13-ticket-004
ACTOR agent:ifuri-validator-agent[bot]
APPLIED_RULE P-CORE-015
INPUT author_login = "tom-sapletta-com"
INPUT observed_checks = ["test=PASS"]
INPUT required_checks = ["test"]
INPUT required_checks_source = "protected registry (env/request)"
INPUT reviewer_login = "ifuri-validator-agent[bot]"
INPUT superseded_checks = []
VERDICT APPROVE AUTHORITY DETERMINISTIC
REJECTED REQUEST_CHANGES BECAUSE NO_UNSAFE_CHANGE_REASON_FOUND
ADVISORY llm_verdict = "" MODEL "zai/glm-5.3"
ASSERT VERDICT_AUTHORITY != "ADVISORY"