Adopt ty as type checker

[Panadestein]

Use ty as the type checker.

• Add ty to the dev dependencies and configure it in pyproject.toml.
• Run it in the lint workflow and as a pre-commit hook.
• Add a scheduled workflow that bumps the pinned version (same shape as update-ruff.yml).
• Fix the findings on src/ and tests/.