Freeze all pre-commit hook revisions to commit SHAs

[fizyk]

Summary

Freeze every hook revision in .pre-commit-config.yaml to a full immutable commit SHA.

Keep the corresponding release tag in an inline # frozen: comment. Use the format produced by pre-commit autoupdate --freeze.

Rationale

Immutable revisions protect contributors from a tag being moved after the configuration is merged. The frozen release tag lets Dependabot identify and update the intended hook release.

Affected area

• .pre-commit-config.yaml

Acceptance criteria

• Every non-local repos[].rev value in .pre-commit-config.yaml is a full commit SHA.
• Each frozen SHA has its corresponding release tag in an adjacent # frozen: comment.
• Dependabot can continue to update the pre-commit ecosystem revisions.
• The pre-commit configuration remains valid.

Backlinks

• Pull request: Add zizmor to pre-commit - closes #826 pytest-mysql#857
• Review comment: Add zizmor to pre-commit - closes #826 pytest-mysql#857 (comment)
• Requested by: @fizyk

---

Copied from dbfixtures/pytest-mysql#858