chore: update rhiza to v1.3.0

[tschm]

Syncs this repo to the latest release of the template it tracks.

• Template repository: jebel-quant/rhiza
• Ref: v1.2.5 → v1.3.0 (upstream commit 65f3c209dcaa)

What changed

17 template-owned files staged: 15 modified, 1 added (.rhiza/make.d/python.mk),
plus .rhiza/template.yml and .rhiza/template.lock.

• .github/workflows/rhiza_*.yml (benchmark, book, ci, codeql, marimo, mutation, paper, release)
• .github/rulesets/main-branch-protection.json
• .gitignore, .pre-commit-config.yaml
• .rhiza/rhiza.mk, .rhiza/make.d/{bootstrap,python,quality}.mk, .rhiza/tests/test_pyproject.py

Conflicts

Two files came back with conflict markers and were resolved by taking the upstream
(template) side — a rhiza-managed file is the template's to own, so local divergence
is drift to undo:

• .gitignore (1 block)
• .rhiza/make.d/quality.mk (1 block)

Dropped file

.rhiza/.cfg.toml is no longer template-owned in v1.3.0 (it was listed in the
v1.2.5 lock and is absent from the new one). The sync removed it from disk; because
it isn't in the new lock's files list the staging script left the deletion unstaged,
so it is committed here separately and deliberately (chore: drop .rhiza/.cfg.toml)
rather than folded into the sync commit.

That file held the [tool.bumpversion] config, which this repo already declares in
pyproject.toml (see 1d84eb9), so nothing depends on it.

Gates

No quality gates were run — /rhiza:update only syncs. Run /rhiza:quality for a
scorecard.

🤖 Generated with Claude Code

[Copilot]

Pull request overview

Syncs this repository’s Rhiza template integration from v1.2.5 to v1.3.0, updating the template-managed developer tooling, Make targets, and GitHub automation that the project relies on for CI/release gates.

Changes:

• Introduces a Python “language layer” Make fragment (.rhiza/make.d/python.mk) and shifts Python-specific gates (install, all, deptry, license, rhiza-test) out of core bootstrap/quality makefiles.
• Strengthens template CI/release invariants: new Rhiza tests for bump-my-version config discoverability and tag reachability; release workflow adds a tagged-commit reachability check.
• Updates pinned reusable workflows and developer tooling versions (pre-commit hook revs, required status check context names, template ref/lock metadata).

Reviewed changes

Copilot reviewed 17 out of 19 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
.rhiza/tests/test_pyproject.py	Adds Rhiza-level tests to ensure bumpversion config is discoverable and latest tag is reachable, tightening release correctness.
.rhiza/template.yml	Bumps the tracked template ref to v1.3.0.
.rhiza/template.lock	Updates lock SHA/ref and synced file list (notably dropping .rhiza/.cfg.toml and adding python.mk).
.rhiza/rhiza.mk	Adjusts core responsibilities (uv/uvx as tool runner) and help-target parsing; removes Python-specific targets moved to the language layer.
.rhiza/make.d/quality.mk	Makes quality gates language-neutral by removing Python-specific targets and leaving pre-commit/todos/semgrep.
.rhiza/make.d/python.mk	New: defines Python project targets (install, all, deptry, license, rhiza-test) previously in bootstrap/quality/core.
.rhiza/make.d/bootstrap.mk	Removes Python-specific install recipe, leaving only language-neutral uv/uvx provisioning and hooks/clean.
.pre-commit-config.yaml	Bumps several hook revisions and documents upcoming bumpversion-config hook enablement.
.gitignore	Removes project-specific ignore entries and adds Rust bundle ignores (kept in core per template rationale).
.github/workflows/rhiza_release.yml	Adds a release safety check ensuring the pushed tag’s commit is reachable from at least one branch (and warns if not on default).
.github/workflows/rhiza_paper.yml	Updates reusable workflow pin to v1.3.0.
.github/workflows/rhiza_mutation.yml	Updates reusable workflow pin to v1.3.0.
.github/workflows/rhiza_marimo.yml	Updates reusable workflow pin to v1.3.0.
.github/workflows/rhiza_codeql.yml	Updates reusable workflow pin to v1.3.0.
.github/workflows/rhiza_ci.yml	Updates reusable workflow pin to v1.3.0.
.github/workflows/rhiza_book.yml	Updates reusable workflow pin to v1.3.0.
.github/workflows/rhiza_benchmark.yml	Updates reusable workflow pin to v1.3.0.
.github/rulesets/main-branch-protection.json	Updates required status check context names to match the ci / <job> naming format.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 17 out of 19 changed files in this pull request and generated no new comments.