Pin ruff checks and codespell checks

Currently there are many failing open PRs with the same ruff warning. We should pin the ruff checks so that whenever ruff changes we don't get everything failing

Inspect the repository's check configuration to find where the ruff and codespell checks are defined and how their versions are selected. Pin both checks, then verify that the configured checks run successfully and no longer change behavior solely because a new tool version is released.

Written by the indexing model from the issue text.