switch to using uv + pyproject.toml instead of setup.py + pin all dependencies

[AbhiPrasad]

Should vastly improve repo dx and supply chain security in the repo. Every single dep needs to be pinned.

We need to figure out how to still test against latest integration package versions in the noxfile test suite.