[cleanup] Misc (#16452)

* Include `pin*` extras in lockfile
* Fix and clean up `devscripts/update_requirements.py`
* Improve release channel documentation
* Remove false statement from `--prefer-insecure` documentation
* Assorted code cleanup
* Set `GH_TELEMETRY=false` in CI/CD whenever `gh` is used
* Add comments about required checks in CI workflows
* Run `test-workflows.yml` for every PR so its checks can be required
* Verify actionlint attestation in CI
* Remove zizmor version to reduce workflow maintenance burden
  (zizmor-action handles pinning on its end)

Authored by: bashonly

.github/workflows/quick-test.yml

@@ -1,5 +1,10 @@
 name: Quick Test
-on: [push, pull_request]
+on:
+  push:
+    branches: ['master']
+  # This workflow contains required checks and needs to run for EVERY pull_request
+  pull_request:
+    branches: ['**']
 
 permissions: {}
 
@@ -9,7 +14,8 @@ concurrency:
 
 jobs:
   tests:
-    name: Core Test
+    # Required check; do not change name
+    name: Core test
     if: ${{ !contains(github.event.head_commit.message, ':ci skip all') }}
     permissions:
       contents: read
@@ -31,7 +37,9 @@ jobs:
       run: |
         python3 -m yt_dlp -v || true
         python3 ./devscripts/run_tests.py --pytest-args '--reruns 2 --reruns-delay 3.0' core
+
   check:
+    # Required check; do not change name
     name: Code check
     if: ${{ !contains(github.event.head_commit.message, ':ci skip all') }}
     permissions:
@@ -43,7 +51,7 @@ jobs:
         persist-credentials: false
     - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405  # v6.2.0
       with:
-        python-version: '3.10'
+        python-version: '3.14'
     - name: Install dev dependencies
       run: python ./devscripts/install_deps.py --omit-default --include-group static-analysis
     - name: Make lazy extractors