chore: add uv exclude-newer policy

Closes #3902

Signed-off-by: lucarlig <luca.carlig@ibm.com>

Author: lucarlig

.secrets.baseline

@@ -3,7 +3,7 @@
     "files": "package-lock.json|Cargo.lock|^.secrets.baseline$|scripts/sign_image.sh|scripts/zap|sonar-project.properties|^/Users/brian/dev/github.ibm.com/contextforge-org/sps-pipeline-config/.secrets.baseline$|^./.secrets.baseline$",
     "lines": null
   },
-  "generated_at": "2026-03-27T11:29:30Z",
+  "generated_at": "2026-03-28T08:19:56Z",
   "plugins_used": [
     {
       "name": "AWSKeyDetector"
@@ -7174,7 +7174,7 @@
         "hashed_secret": "965242380eeefd51c596c8c7b6f9f6ebd77faa86",
         "is_secret": false,
         "is_verified": false,
-        "line_number": 652,
+        "line_number": 655,
         "type": "Secret Keyword",
         "verified_result": null
       }

pyproject.toml

@@ -7,6 +7,9 @@
 requires = ["setuptools>=78.1.1", "wheel>=0.46.2"]
 build-backend = "setuptools.build_meta"
 
+[tool.uv]
+exclude-newer = "10 days"
+
 # ----------------------------------------------------------------
 # 📦 Core project metadata (PEP 621)
 # ----------------------------------------------------------------