[CHORE]: Pin `ruff` to specific version across repo/CI

[camdecoster]

Description

Pin ruff to one version across the repo.

Why should this change be made?

There should be no ambiguity about which version should be used to check the code.

Scope

• There are three places to make an adjustment:
  • .pre-commit-config.yaml (currently pins v0.14.4)
  • .github/workflows/ruff.yml (currently doesn't pin with ruff-action@v3, so latest gets used)
  • pyproject.toml: ruff isn't listed here, so we should add it to lock the version