update project files (#5457)

* update pre-commit hook
* upgrade pip with venv
* update description and version
* show url in publish environment
* update versions
* update versions, separate typing job
* use dependabot grouped updates
  ignore upload/download-artifact until slsa updates
* use sphinx.ext.extlinks instead of sphinx-issues
* update dev dependencies
* update editorconfig
* update gitignore
* update .readthedocs.yaml
* license is txt, readme is md
* update pyproject.toml
  add typed classifier
  add pyright config
  simplify urls
* tox builds docs in place
* update min test py version
* add tox env to update all dev dependencies
* update issue and pr templates
* rename security docs page to not conflict with org policy file
* simplify matrix

requirements/typing.txt

@@ -1,26 +1,41 @@
 #
-# This file is autogenerated by pip-compile with Python 3.11
+# This file is autogenerated by pip-compile with Python 3.12
 # by the following command:
 #
 #    pip-compile typing.in
 #
-asgiref==3.7.2
+asgiref==3.8.1
     # via -r typing.in
 cffi==1.16.0
     # via cryptography
-cryptography==41.0.7
+cryptography==42.0.5
     # via -r typing.in
-mypy==1.8.0
+iniconfig==2.0.0
+    # via pytest
+mypy==1.9.0
     # via -r typing.in
 mypy-extensions==1.0.0
     # via mypy
-pycparser==2.21
+nodeenv==1.8.0
+    # via pyright
+packaging==24.0
+    # via pytest
+pluggy==1.4.0
+    # via pytest
+pycparser==2.22
     # via cffi
-python-dotenv==1.0.0
+pyright==1.1.357
+    # via -r typing.in
+pytest==8.1.1
+    # via -r typing.in
+python-dotenv==1.0.1
     # via -r typing.in
 types-contextvars==2.4.7.3
     # via -r typing.in
 types-dataclasses==0.6.6
     # via -r typing.in
-typing-extensions==4.9.0
+typing-extensions==4.11.0
     # via mypy
+
+# The following packages are considered to be unsafe in a requirements file:
+# setuptools