- Build and cache uv dependencies; update type-checker, tests, and linter to use cache - Remove separate security-checker - Add explicit workflow permissions for compliance - Remove pull_request trigger from build-cache workflow