Check uv.lock and plugins/uv.lock freshness in just check and CI

.github/workflows/ci.yml

@@ -46,6 +46,7 @@ jobs:
       - uses: extractions/setup-just@53165ef7e734c5c07cb06b3c8e7b647c5aa16db3  # v4.0.0
         with:
           just-version: 1.58.0
+      - run: just lock-check
       - run: just lint
       - run: just format-check
       - run: just import-check

Justfile

@@ -12,6 +12,8 @@ default:
 
 # Run root and plugin static checks, contracts, and repository checks
 check:
+    @printf '─── Lock Files ─────────────────────────────────\n'
+    @just lock-check
     @just python-check-env
     @printf '─── Format Check ───────────────────────────────\n'
     @just format-check
@@ -46,6 +48,11 @@ check:
     @printf '\n─────────────────────────────────────────────────\n'
     @printf 'All checks passed!\n'
 
+# Verify both lock files match their pyproject.toml, because the --frozen syncs below install a stale lock without complaint
+lock-check:
+    uv lock --check
+    uv lock --project plugins --check
+
 # Check code formatting without modifying files
 format-check:
     uv run ruff format --check .