ci: fixes

- Install UV
- Verbose run
- Set permissions explicitly
- Check all files

.forgejo/workflows/prefligit-checks.yml

@@ -2,6 +2,9 @@ name: Checks / Prefligit
 
 on:
   push:
+  pull_request:
+permissions:
+  contents: read
 
 jobs:
   prefligit:
@@ -10,6 +13,10 @@ jobs:
       FROM_REF: ${{ github.event.pull_request.base.sha || (!github.event.forced && ( github.event.before != '0000000000000000000000000000000000000000'  && github.event.before || github.sha )) || format('{0}~', github.sha) }}
       TO_REF: ${{ github.sha }}
     steps:
+    - name: Checkout repository
+      uses: actions/checkout@v4
+      with:
+        persist-credentials: false
     - uses: ./.forgejo/actions/prefligit
       with:
-        extra_args: --from-ref ${{ env.FROM_REF }} --to-ref ${{ env.TO_REF }} --hook-stage manual
+        extra_args: --all-files --hook-stage manual