fix(packaging): add setuptools to dev extra so packaging test collects

[teknium1]

Summary

tests/test_packaging_metadata.py (added in #34811) now collects in CI instead of erroring out.

The test imports from setuptools import find_packages at module level. setuptools is declared only under [build-system].requires, not as a runtime/test dependency — so CI's uv-managed test venv (uv pip install -e ".[all,dev]") doesn't have it, and the module fails at collection with ModuleNotFoundError: No module named 'setuptools'. This shows up as a red test (slice 4/6) shard on every PR branched off main since #34811 landed, even though all 4026 tests pass.

Changes

• pyproject.toml: add setuptools>=61.0 to the dev extra (matching the [build-system] pin), so the wheel-packaging regression test keeps running in CI rather than being skipped or erroring.
• uv.lock: regenerated (setuptools was already a transitive entry; just adds it to the all/dev extra references).

Validation

$ python3 -m pytest tests/test_packaging_metadata.py -q
4 passed in 0.10s

Before: ERROR collecting tests/test_packaging_metadata.py → ModuleNotFoundError: No module named 'setuptools' → shard 4 red.

[github-actions]

⚠️ Unbounded PyPI Dependency Detected

This PR adds PyPI dependencies without a <next_major upper bound. Per our supply chain policy, all PyPI deps must be pinned as >=floor,<next_major.

Unbounded specs found:

"setuptools>=61.0"

Fix: Add an upper bound, e.g. "package>=1.2.0,<2"

---

See PR #2810 and CONTRIBUTING.md for the full policy rationale.

[github-actions]

🔎 Lint report: fix/packaging-test-setuptools-dep vs origin/main

ruff

Total: 0 on HEAD, 0 on base (➖ 0)

🆕 New issues: none

✅ Fixed issues: none

Unchanged: 0 pre-existing issues carried over.

ty (type checker)

Total: 9455 on HEAD, 9455 on base (➖ 0)

🆕 New issues: none

✅ Fixed issues: none

Unchanged: 4909 pre-existing issues carried over.

Diagnostics are surfaced as warnings — this check never fails the build.

[alt-glitch]

Duplicate of #34851 — both add setuptools to dev extra for test_packaging_metadata.py. #34851 also adds pytest.importorskip guard as belt-and-suspenders.

[teknium1]

Duplicate of #34851 (created 4 min earlier, same root cause). #34851 also adds a defensive pytest.importorskip guard so the shard skips gracefully if setuptools is ever absent — keeping that one. Relaxing its exact pin to a version range there.