Fix CI: replace third-party actions with pip installs per org policy

Author: MichaelGHSeg

.github/workflows/ci.yml

@@ -22,12 +22,10 @@ jobs:
       - name: Authenticate with Artifactory
         if: ${{ !github.event.pull_request.head.repo.fork }}
         uses: ./.github/actions/artifactory-oidc
-      - uses: astral-sh/setup-uv@0c5e2b8115b80b4c7c5ddf6ffdd634974642d182 # v5
-        with:
-          version: "0.9.26"
       - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
         with:
           python-version: "3.11"
+      - run: pip install uv==0.9.26
       - run: uv sync --frozen --all-extras
       - run: uv run ruff check .
       - run: uv run ruff format --check .
@@ -44,12 +42,10 @@ jobs:
       - name: Authenticate with Artifactory
         if: ${{ !github.event.pull_request.head.repo.fork }}
         uses: ./.github/actions/artifactory-oidc
-      - uses: astral-sh/setup-uv@0c5e2b8115b80b4c7c5ddf6ffdd634974642d182 # v5
-        with:
-          version: "0.9.26"
       - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
         with:
           python-version: ${{ matrix.python-version }}
+      - run: pip install uv==0.9.26
       - run: uv sync --frozen --all-extras
       - run: uv run pytest
 
@@ -61,12 +57,10 @@ jobs:
       - name: Authenticate with Artifactory
         if: ${{ !github.event.pull_request.head.repo.fork }}
         uses: ./.github/actions/artifactory-oidc
-      - uses: astral-sh/setup-uv@0c5e2b8115b80b4c7c5ddf6ffdd634974642d182 # v5
-        with:
-          version: "0.9.26"
       - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
         with:
           python-version: "3.11"
+      - run: pip install uv==0.9.26
       - name: Build package
         run: uv build
       - name: Verify installable

.github/workflows/deploy.yml

@@ -24,12 +24,10 @@ jobs:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - name: Authenticate with Artifactory
         uses: ./.github/actions/artifactory-oidc
-      - uses: astral-sh/setup-uv@0c5e2b8115b80b4c7c5ddf6ffdd634974642d182 # v5
-        with:
-          version: "0.9.26"
       - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
         with:
           python-version: ${{ matrix.python-version }}
+      - run: pip install uv==0.9.26
       - run: uv sync --frozen --all-extras
       - run: uv run pytest
 
@@ -47,12 +45,10 @@ jobs:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - name: Authenticate with Artifactory
         uses: ./.github/actions/artifactory-oidc
-      - uses: astral-sh/setup-uv@0c5e2b8115b80b4c7c5ddf6ffdd634974642d182 # v5
-        with:
-          version: "0.9.26"
       - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
         with:
           python-version: "3.12"
+      - run: pip install uv==0.9.26
 
       - name: Validate tag format and version match
         run: |
@@ -76,4 +72,9 @@ jobs:
         run: uv build
 
       - name: Publish to PyPI
-        uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # v1.14.0
+        run: |
+          pip install twine
+          twine upload --repository pypi dist/*
+        env:
+          TWINE_USERNAME: __token__
+          TWINE_PASSWORD: ${{ secrets.PYPI_API_TOKEN }}