chore(dev): review CI

[2bndy5]

• resolves switch (back) to hyperfine for benchmarks #182 by replacing rust-based benchmark with nushell script (which employs hyperfine)
• satisfies zizmor linting of CI workflows
• migrate from nox to nur for dev task runner (uses nushell script)
• updated pre-commit hooks
• updated locked python deps
• automatically cancel CI runs when a new run is triggered (does not apply to default branch)

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 96.87%. Comparing base (02c500c) to head (1026bdc).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #195   +/-   ##
=======================================
  Coverage   96.87%   96.87%           
=======================================
  Files          14       14           
  Lines        3134     3134           
=======================================
  Hits         3036     3036           
  Misses         98       98           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.