build(deps): Bump uv to 0.13.5 (#8135)

### Description
Bumps the locked `uv` dev dependency (pulled in through `tox-uv`) from
0.13.4 to 0.13.5. Only the `uv` entry in `uv.lock` changes.

uv 0.13.4 only dropped the compromised emSign root from its CA store.
0.13.5 also rejects certificate chains that contain the compromised
eMudhra intermediates.

#### Issues
* VULN-3216

<!-- junior-request-attribution:start -->
via **Geoff Goldsmith**.
<!-- junior-request-attribution:end -->

<!-- junior-session-footer:start -->
<!-- junior-conversation-id:agent%3Adc610e7306e1288f72858a9a1d6e6d54 -->

--

[View Junior
Session](https://junior-prod.sentry.dev/conversations/agent%3Adc610e7306e1288f72858a9a1d6e6d54)
[[Sentry]](https://sentry.sentry.io/explore/conversations/agent%3Adc610e7306e1288f72858a9a1d6e6d54/?project=4510944073809921)

<!-- junior-session-footer:end -->

Co-authored-by: sentry-junior[bot] <264270552+sentry-junior[bot]@users.noreply.github.com>
Co-authored-by: Geoff Goldsmith <geoff.goldsmith@sentry.io>

Author: sentry-junior[bot]