67b3bfa213
## Summary The culmination of #4730. We now have `uv run --isolated` which always uses a fresh environment (but includes the workspace dependencies as needed). This enables you to test with strict isolation (e.g., `uv run --isolated -p foo` will ensure that `foo` is unable to import anything that isn't an actual dependency). Closes #5430.