Catch an outdated uv.lock before you deploy

tofupilot validate now checks your uv.lock the way the deployment build does, offline on your machine, so you see the build's verdict before you push.

• Added lock checks to tofupilot validate: it reports a uv.lock that no longer matches pyproject.toml, a missing one, and one that will not ship with the deployment (ignored by .gitignore or not committed).
• Added a guard to tofupilot deploy: it refuses an outdated uv.lock before uploading, and warns when the lock is missing or left out.
• Improved tofupilot validate --watch so that saving pyproject.toml or uv.lock runs the check again.