ci: manage Ruff and Pyright with dev dependency

Current Python workflow always uses the latest version of Ruff and Pyright.
It's kind of annoying when the code is perfectly fine in my local setup, so I push it,
but then the CI fails because it uses a newer version of Ruff with more rules.

I should lock formatters and linters in the dev dependencies as well.