Lock digests and unify uv layers

[zvonimir-delas]

• Locked SHA256 digests to avoid rebuilds and improve reproducibility
  • For version and security updates, change the version and the digest
• Unified the two uv sync commands so both are before the COPY src - this should minimise rebuilds
  • The second step appears to have been the same as first, except without the --no-install-project flag. But uv has --no-install-project included by default if there is no build-system in the pyproject.toml file. Since this project doesn't have build-system, I don't think the steps were actually any different
• Removed ENV UV_COMPILE_BYTECODE=1 - this was the step that was timing out. It might result in a slightly slower startup, but on the very first request only. This is a workaround for the server performance issue.

[github-actions]

New build (#11) deployed to staging 🚧
- Test it on the staging URL: papa.amfws.staging.arg.tech
- If you update the PR or create another one, a new build will be created, replacing this one
- View build log

Note: If this PR is to main, only authorized users will be allowed to merge. Once merged to main, the build will be promoted to the production server. Ensure the staging build works correctly before merging.

[github-actions]

In progress: build being promoted to production 🏗️
- Target server: argand
- View build log

[github-actions]

Build deployed to production 🏠
- Target server: argand
- Your app's URL: papa.amfws.arg.tech
- Tip: delete the source branch, and for future work create a fresh one from main to avoid merge conflicts
- View build log