Fix run-code-check after dependency updates

- Pin filelock>=3.20.1 to address vulnerability GHSA-w853-jp5j-5j7f
- Update uv.lock to use filelock 3.20.1

The pip-audit check was failing due to a security vulnerability in
filelock 3.20.0. This vulnerability is a Time-of-Check-Time-of-Use
(TOCTOU) race condition that allows local attackers to corrupt or
truncate arbitrary user files through symlink attacks.

Co-authored-by: AI Engineering Maintenance Bot <[email protected]>

Author: aieng-bot-maintain[bot]

pyproject.toml

@@ -52,6 +52,7 @@ packages = ["src/gaca_ews"]
 [dependency-groups]
 dev = [
     "codecov>=2.1.13",
+    "filelock>=3.20.1", # Pinning version to address vulnerability GHSA-w853-jp5j-5j7f
     "mypy>=1.14.1",
     "nbqa>=1.9.1",
     "pip>=25.2", # Pinning version to address vulnerability GHSA-4xh5-x5gv-qwph