[sodle-splunk]

Summary

• declare uv as a normal runtime dependency of local-hooks
• keep notice generation on the isolated uv tool path in hosted pre-commit environments
• add a regression assertion for packaged dependency metadata

Why

The notice hook prefers uv but did not install it in its isolated pre-commit environment. Hosted connector CI therefore fell back to pip-installing every connector runtime dependency. Traditional connectors with platform-specific packages such as pykerberos then fail before notice generation, even though their generated notice and connector code are valid.

This blocks:

• PAPP-38246 / fix: improve Microsoft SCCM validation and data handling splunk-soar-connectors/microsoftsccm#37
• PAPP-38247 / fix: remediate Microsoft SCOM Flashpoint findings splunk-soar-connectors/microsoftscom#32 if the same fallback is reached

Parent campaign epic: ESPM-5228.

Validation

• UV_CACHE_DIR=/tmp/uv-cache uv run --with pytest pytest local_hooks/tests/test_generate_notice.py -q (17 passed)
• UV_NO_CONFIG=1 PIP_INDEX_URL=https://pypi.org/simple pre-commit run --all-files

This pull request was prepared by Codex.