Migrate to SDLC standards (UV + sdlc@3 + codeartifact@3)

[franciscofabian]

Summary

• Convert setup.py / setup.cfg (and the partial pyproject.toml) to a full PEP 621 pyproject.toml
• Pin parquery==2.0.6 (setup.py had 2.0.6, the partial pyproject had stale 2.0.2)
• Drop direct pyarrow dep (pulled transitively via parquery)
• Drop codacy-coverage from the test group (replaced by sdlc/run-tests-with-coverage)
• Add uv.lock (65 packages resolved against CodeArtifact private index)
• __version__ now resolved via importlib.metadata (drops the PRE_RELEASE_VERSION env-var fallback)
• CircleCI: sdlc@3 + codeartifact@3 orbs; full SDLC flow:
  • feature → test → approval → publish-dev (X.Y.Z.devN)
  • master/main → test → publish-rc (X.Y.ZrcN) → approval → create-release-branch
  • release/* → test → publish-release (X.Y.TIMESTAMP) + create-git-release
• sdlc/run-tests-with-coverage preserves the existing test exclusions (test_move_parquet.py, test_simple_rpc.py) via extra-pytest-args, sets PARQUERYD_DATA_DIR=/tmp/parquet/ before running
• ADR-4 pre-commit hooks: ruff, bandit, branch-name validator, uv-lock auto-update
• ruff config moved from pyproject.toml → standalone ruff.toml (per ADR-4)
• .github/workflows: validate.yml (PR validation) + pr-jira-footer.yml
• .coveragerc, Makefile (kebab-case targets + default help target)

Verification

• uv lock resolves cleanly (65 packages)
• uv build produces wheel + sdist
• circleci config validate passes
• make help prints the target list

Notes

• ARM64 testing was dropped. The previous config ran py311-x86 (with coverage) and py311-arm64 (smoke test) in parallel. The SDLC sdlc/python executor is amd64-only. If cross-arch validation is needed, we can add a sidecar job using cimg/python:3.11 on arm.medium.
• parqueryd is a public repo. The validate.yml GitHub Action calls visualfabriq/.github/.github/workflows/validate-pr.yml@main, which is a private reusable workflow — public repos can't currently consume it (same situation as parquery PR Py3.11 #45). Either delete validate.yml or open up access on the .github repo. CircleCI's sdlc/validate-commit-format covers commit-format validation regardless.
• GitHub repo settings (squash-only, PR_TITLE / PR_BODY for the squash commit, branch protection on master) need to be set manually via Settings → General if not already done.
• The first dev/rc version on master will be 2.0.2rc1 (latest published is 2.0.1, no timestamp). After the first publish-release on a release branch publishes a timestamp version, subsequent rc/dev versions will inherit the timestamp.

Test plan

• CircleCI: test job runs and passes on this PR (the two known-flaky tests are still ignored)
• On merge to master: publish-rc publishes 2.0.2rc1 to CodeArtifact
• Manual approval triggers create-release-branch
• On release branch: publish-release publishes the timestamped final + GH release with assets

---

jira: FOUN