Installs locked dependencies and runs the caller's commands in order in the
official node:<version>-bookworm image; optional pinned, sha256-verified uv
for repositories with Python script checks. Verify only, no publishing.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>