feat: generalize update-lockfile workflow with configurable package and SSH support

[devin-ai-integration]

Summary

Generalizes the update-lockfile reusable workflow so it can be used by any repo to upgrade any uv-managed git/PyPI dependency, not just create-benchmark-service.

Changes

• Added package input (default: create-benchmark-service) — specifies which package to upgrade
• Added working_directory input (default: .) — for repos where the lockfile lives in a subdirectory
• Added commit_message, pr_title, pr_branch inputs with sensible defaults derived from the package name
• Added optional SUBMODULES_SSH_KEY secret for repos that resolve private git+ssh:// dependencies
• All defaults are backward-compatible: existing callers that pass no inputs will behave identically

Type of Change

• New feature

Testing

• Self-reviewed the diff
• Existing callers (e.g. fabv2-benchmark-service) pass no inputs, so they will use the defaults (create-benchmark-service, ., etc.) — no behavior change
• New caller (agent-registry) will be wired up in a separate PR

Checklist

• Self-reviewed the diff
• No debug/dead code left in
• Docs updated if needed

Link to Devin session: https://app.devin.ai/sessions/687a042b6dac42798cb5dbe1c4a94e6c
Requested by: @BradenBug

[devin-ai-integration]

🤖 Devin AI Engineer

I'll be helping with this pull request! Here's what you should know:

✅ I will automatically:

• Address comments on this PR. Add '(aside)' to your comment to have me ignore it.
• Look at CI failures and help fix them

Note: I can only respond to comments from users who have write access to this repository.

⚙️ Control Options:

• Disable automatic comment and CI monitoring

[assert-app]

Review on Assert →