d8323551f8
## Summary If the user runs with `--generate-hashes`, and the lockfile doesn't contain _any_ hashes for a package (despite being pinned), we should add new hashes. This mirrors running `uv pip compile --generate-hashes` for the first time with an existing lockfile. Closes #2962.