Pip resolving dependencies at build time creates non-reproducible images unless you pin hashes. With uv making resolution faster, what's the modern standard for Python Dockerfiles?