Update hook dependency pins

prek update --freeze moves pre-commit hook revisions to commit SHAs. Use release-creator hooks in the same weekly change to pin packages declared by Python hook repositories and packages in additional_dependencies:

prek update --freeze --cooldown-days 7
release-creator hooks --exclude-newer '7 days' --python-version 3.15
prek run --all-files

The command checks out each external hook repository at its frozen commit and reads .pre-commit-hooks.yaml. For selected Python hooks, it resolves the repository package with any exact additional_dependencies and adds the pinned closure to that hook’s additional_dependencies. It also resolves exact dependencies in local hooks. Conditional dependencies remain conditional, so a Windows-only package does not install on Linux. Non-Python hooks are unchanged.

Generated pins have a # release-creator managed marker. The next update replaces them. Direct pins retain their spelling and comments; a flow-style list becomes a block list when the closure adds packages. A range such as mdformat-gfm>=1 stays as written and is not a resolution root. Use the Python version that the hooks run with; the cutoff excludes newly published packages.

If uv cannot resolve every pinned package, the command fails without changing the file. Review the patch and run prek before opening the update PR. The command does not update hook revisions, project requirements, or pylock.toml; the weekly workflow handles those separately.