Cookiecutter update

[Zeitsperre]

Pull Request Checklist:

• This PR addresses an already opened issue (for bug fixes / features)
  • This PR fixes #xyz
• (If applicable) Documentation has been added / updated (for bug fixes / features).
• (If applicable) Tests have been added.
• CHANGELOG.rst has been updated (with summary of main changes).
  • Link to issue (:issue:number) and pull request (:pull:number) has been added.

What kind of change does this PR introduce?

• Updates the cookiecutter template
• GitHub Actions and Python dependencies updated
• Now using an Advanced CodeQL configuration
• Added pre-commit hooks for vulture (find dead code), codespell (spelling errors), zizmor (workflow security), and gitleaks (token commit prevention)
• coveralls is disabled for Python3.13

Does this PR introduce a breaking change?

No.

Other information:

mypy has been staged, but not enabled. Adopting this convention requires moderate effort to configure and adhere to. Worth considering in the future.

[github-advanced-security]

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

[coveralls]

coverage: 100.0%. remained the same
when pulling 05f2438 on cookiecutter-update
into a5a501c on main.