ci: optimize quality checks and isolate dependency tests

[leandrodamascena]

Issue number: closes #8534

Summary

Changes

Run formatting, linting, security and complexity checks once alongside the Python matrix. Configure Python before uv so runtime jobs use distinct dependency caches, cache mypy analysis, and cancel superseded PR runs.

Remove fastjsonschema from the shared Nox test dependencies. OpenAPI schema checks, Idempotency with Validation, and schema-validation middleware tests now run with their declared extras. Imports used by those tests are deferred until execution so they cannot contaminate collection in the minimal environments.

Recreate Nox environments between runs and fail the required-dependencies session if fastjsonschema leaks back in. Add make lint-check for checks without formatting, and keep Git hook installation in make dev.

User experience

Tests, dependency checks, type checking and coverage uploads remain on Python 3.10–3.14. Existing Lambda E2E coverage is preserved.

The required-dependencies, SDK and Parser sessions run without fastjsonschema. The 14 cases requiring additional Validation dependencies are retained in the appropriate sessions and in the full suite.

Validation

• Full Python 3.10 suite: 3,531 passed, 4 skipped, plus all 10 performance tests.
• All 15 Nox sessions passed on Python 3.10 and 3.14. Both executed the same 2,904 cases as the previous CI run, preserving the number of cases per test function.
• Confirmed the installed dependencies in each minimal and combined environment. Deliberately adding fastjsonschema to a reused base environment failed the isolation check; recreating it removed the contamination and passed.
• Ruff, applicable pre-commit hooks, and both type checkers passed.
• Local mypy execution took 40.0 seconds with an empty cache and 0.34 seconds with a warm cache. These are local measurements, not GitHub Actions timings.

---

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

Disclaimer: We value your time and bandwidth. As such, any pull requests created on non-triaged issues might not be successful.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 96.92%. Comparing base (17ace09) to head (0db206a).
⚠️ Report is 1 commits behind head on develop.

Additional details and impacted files

@@           Coverage Diff            @@
##           develop    #8535   +/-   ##
========================================
  Coverage    96.92%   96.92%           
========================================
  Files          317      317           
  Lines        15911    15911           
  Branches      1398     1398           
========================================
  Hits         15422    15422           
  Misses         353      353           
  Partials       136      136           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud