ci: pin ruff to the latest passing release (#408)

* ci: pin ruff to the passing baseline

* ci: use the latest passing ruff release

* ci: share the ruff pin through a lint dependency group

* ci: note follow-up to update lint and unpin ruff

.github/workflows/wheels.yml

@@ -111,7 +111,8 @@ jobs:
 
       - name: Lint and format with ruff
         run: |
-          pip install ruff
+          pip install --upgrade pip
+          pip install --group lint
           ruff check .
           ruff format --check .