Keep composite action pins current (#4101)

Dependabot only scanned workflow action references, so setup-uv in the
Tend composite setup action lagged behind. This aligns setup-uv at
v10.1.0 and extends the existing daily GitHub Actions update to every
composite action directory.

> _This was written by Codex on behalf of @max-sixty_

.github/actions/tend-setup/action.yaml

@@ -55,7 +55,7 @@ runs:
         done
 
     - name: Install uv
-      uses: astral-sh/setup-uv@v7.6.0
+      uses: astral-sh/setup-uv@v10.1.0
       with:
         cache-dependency-glob: .pre-commit-config.yaml
 

.github/dependabot.yaml

@@ -15,7 +15,9 @@ updates:
     labels: []
 
   - package-ecosystem: "github-actions"
-    directory: "/"
+    directories:
+      - "/"
+      - "/.github/actions/*"
     commit-message:
       prefix: "chore: "
     schedule: